Your message dated Tue, 4 Oct 2005 17:59:20 +0200
with message-id <[EMAIL PROTECTED]>
and subject line (no subject)
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--------------------------------------
Received: (at submit) by bugs.debian.org; 16 Aug 2005 07:51:49 +0000
>From [EMAIL PROTECTED] Tue Aug 16 00:51:49 2005
Return-path: <[EMAIL PROTECTED]>
Received: from (vserver151.vserver151.serverflex.de) [193.22.164.111] 
        by spohr.debian.org with esmtp (Exim 3.36 1 (Debian))
        id 1E4wEf-0007H5-00; Tue, 16 Aug 2005 00:51:49 -0700
Received: from wlan-client-006.informatik.uni-bremen.de ([134.102.116.7] 
helo=localhost.localdomain)
        by vserver151.vserver151.serverflex.de with esmtpsa 
(TLS-1.0:RSA_AES_256_CBC_SHA:32)
        (Exim 4.50)
        id 1E4wEb-0003lt-Jc
        for [EMAIL PROTECTED]; Tue, 16 Aug 2005 09:51:45 +0200
Received: from jmm by localhost.localdomain with local (Exim 4.52)
        id 1E4wF0-0001ZG-PJ; Tue, 16 Aug 2005 09:52:10 +0200
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Moritz Muehlenhoff <[EMAIL PROTECTED]>
To: Debian Bug Tracking System <[EMAIL PROTECTED]>
Subject: egroupware: Another XMLRPC vulnerability
X-Mailer: reportbug 3.15
Date: Tue, 16 Aug 2005 09:52:10 +0200
Message-Id: <[EMAIL PROTECTED]>
X-SA-Exim-Connect-IP: 134.102.116.7
X-SA-Exim-Mail-From: [EMAIL PROTECTED]
X-SA-Exim-Scanned: No (on vserver151.vserver151.serverflex.de); SAEximRunCond 
expanded to false
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
        (1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE 
        autolearn=no version=2.60-bugs.debian.org_2005_01_02

Package: egroupware
Severity: grave
Tags: security
Justification: user security hole

Hi,
another vulnerability has been found in the XMLRPC code. Please
see http://www.hardened-php.net/advisory_142005.66.html for
more information. egroupware was affected by July's vulnerability,
so it might now be affected as well (haven't verified that myself).

Cheers,
        Moritz

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.12-rc5
Locale: LANG=C, [EMAIL PROTECTED] (charmap=ISO-8859-15)

---------------------------------------
Received: (at 323350-done) by bugs.debian.org; 4 Oct 2005 15:59:54 +0000
>From [EMAIL PROTECTED] Tue Oct 04 08:59:54 2005
Return-path: <[EMAIL PROTECTED]>
Received: from pop.gmx.de (mail.gmx.net) [213.165.64.20] 
        by spohr.debian.org with smtp (Exim 3.36 1 (Debian))
        id 1EMpCs-00052v-00; Tue, 04 Oct 2005 08:59:54 -0700
Received: (qmail invoked by alias); 04 Oct 2005 15:59:21 -0000
Received: from dslb-084-063-005-133.pools.arcor-ip.net (EHLO colt.pezone.net) 
[84.63.5.133]
  by mail.gmx.net (mp002) with SMTP; 04 Oct 2005 17:59:21 +0200
X-Authenticated: #495269
From: Peter Eisentraut <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Date: Tue, 4 Oct 2005 17:59:20 +0200
User-Agent: KMail/1.8.1
MIME-Version: 1.0
Content-Type: text/plain;
  charset="us-ascii"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Message-Id: <[EMAIL PROTECTED]>
X-Y-GMX-Trusted: 0
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
        (1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-1.5 required=4.0 tests=BAYES_00,NOSUBJECT 
        autolearn=no version=2.60-bugs.debian.org_2005_01_02

Version: 1.0.0.007-2.dfsg-2sarge2


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to