On Fri, 2010-07-09 at 11:44 -0400, Stefan Sperling wrote:
> As far as I can tell there is little we can do to secure svnserve
> against this attack on Windows systems other than Server 2003,
> because APR won't let us set the SO_EXCLUSIVEADDR option.

That's okay, we don't want the SO_EXCLUSIVEADDR behavior.  We want the
default behavior under Windows, which corresponds to the SO_REUSEADDR
behavior under Unix.


Reply via email to