On Thu, 25 Dec 2008 03:57:05 pm Lukas Ruf wrote: > Dear Rene > > > Rene Engelhard <r...@debian.org> [2008-12-24 14:54]: > > [...] > > Thanks for your elaboration. > > > Note Steffen didn't say /etc/passwd or so but any file on the system > > the user has rights on. > > See your statement: what can I add :) "the user has rights on" -- > that's exactly not "arbitrary". > > Anyway, the vulnerability is fixed in sf.net's subversion repository > of muttprint. A release v0.73 will follow very soon including the > announcement. > > Btw. I have never had the intention to offend Steffen or > anybody else. Please accept my appologies if my reply made you > feel offended. I just challenged the imprecise wording of > "arbitrary". No harm done, I am not offended. It's hard for MITRE to deal with all these dozens of symlink issues that were reported within the last months, so they use generic templates. Anyway, thanks for fixing the issue and merry christmas :)
Cheers Steffen
signature.asc
Description: This is a digitally signed message part.
