Bug#357561: Severity

[Richard Thrippleton <ret28@cam.ac.uk>]

As the person who found and has thoroughly tested this bug, I can confirm
firsthand that this isn't just a case of apache being vulnerable with "-F"! I
specifically mentioned using the init script in the original report over a
month ago, not "-F". That is, the circumstances required to exploit this are
not 'rare'.
With this in mind, I'm still confused as to why if you can root a machine with
a buffer overflow, it's critical, but if you can root a machine using a
terminal exploit, it's not. Either way, you end up with an owned machine, the
method is unimportant.

Richard