Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

Re: [OT] unarj dir-transversal bug (../../../..)
From: evilninja <evilninja () gmx net>
Date: Tue, 12 Oct 2004 17:42:58 +0200

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Cedric Blancher wrote:
There was a time when arj archiver was not available under Debian, for
licensing/distribution problems, and only unarj package was available.
As you can see, stable has only unarj 2.43 in non-free section :

ah! i *thought* it was in non-free once, but only checked the unstable
version where it's in main.

Now, they have both arj and unarj 3.10.21, unarj being transitional for
people to upgrade smoothly to old unarj 2 only package to full-featured
arj 3 package when moving to upper distro. So expect unarj to disappear

makes sense, yes. thanks for clarification.

- --
BOFH excuse #225:

It's those computer people in X {city of world}.  They keep stuffing
things up.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFBa/uCC/PVm5+NVoYRAgqKAJ98WBZKE/YSZkFPY4QMkDSAvFNADgCePgHJ
aFpkN0WppFkUN52TaV22zS8=
=vAaS
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault