Geoff Crompton wrote:
> CAN-2003-0020 is a vulnerability in apache that mentions how apache
> allows escape sequences into the error logs, which might exploit a
> terminal program viewing them.
> More detail is at http://www.securityfocus.com/bid/9930. The
> securityfocus page lists Debian as being vulnerable, and I can't find a
> DSA that corresponds to CAN-2003-0020.
>
> Does anyone know if Debian is vulnerable or fixed?
CAN-2003-0020
- apache2 2.0.49
- apache 1.3.29.0.2-4
Above are the versions that contained the fixes, for unstable/testing.
--
see shy jo
Attachment:
signature.asc
Description: Digital signature