Bug#323349: phpgroupware: Another vulnerability in XMLRPC code

2005-08-17 Thread Thomas Viehmann
Hi Moritz,

> see http://www.hardened-php.net/advisory_142005.66.html for
thank you very much for alerting me of the problem. I'm presently
working out with upstream whether phpGroupWare is affected and if so
will fix it ASAP.

Kind regards

T.
-- 
Thomas Viehmann, http://thomas.viehmann.net/


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#323349: phpgroupware: Another vulnerability in XMLRPC code

2005-08-16 Thread Moritz Muehlenhoff
Package: phpgroupware
Severity: grave
Tags: security
Justification: user security hole

Hi,
another vulnerability has been found in the XMLRPC code. Please
see http://www.hardened-php.net/advisory_142005.66.html for
more information. phpgroupware was affected by July's vulnerability,
so it might be affected as well (haven't verified that myself).

Cheers,
Moritz

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.12-rc5
Locale: LANG=C, [EMAIL PROTECTED] (charmap=ISO-8859-15)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]