|
Bugtraq
mailing list archives
Re: CVS DoS
From: kris () FREEBSD ORG (Kris Kennaway)
Date: Mon, 24 Apr 2000 15:17:27 -0700
On Mon, 24 Apr 2000, Kris Kennaway wrote:
of the filesystem used by CVS to maintain its lock state. It's also not
quite as serious as it might first sound, because anyone who can
legitimately connect to the CVS server remotely via CVS can cause a lock
to be taken out over any part of the repository, with the same effect.
Sorry, but on further thought I don't think this is true. Locks are only
acquired for CVS write operations, not read operations.
Kris
----
In God we Trust -- all others must submit an X.509 certificate.
-- Charles Forsythe <forsythe () alum mit edu>
By Date
By Thread
Current thread:
- Hotmail security hole - injecting JavaScript in IE using "@import url(http://host/hostile.css)", (continued)
|