Only two remote holes in the default install, in more than 10 years

gstar17y ago· 2 in thread

I cant decide if that's classy or cheeky.

But regardless, I dont know if a bug in cvsweb counts as openbsd - does it?

Not when cvsweb is running on Solaris.

why run solaris at all when there is only 2 remote holes in the default install of openbsd?

stassats17y ago· 2 in thread

Is that a hole? Is that a default install?

gopherOP17y ago

A security hole? Indeed. In the default install? No, but anyways, those are the security guys and I feel this was funny:-)

there17y ago

oh no, a lame xss bug in a 3rd party cgi script that runs on a solaris web server hosting a website that uses no cookies. surely this is big news!

You have achieved the difficult task of making CVS less usable.

dguido17y ago

This was posted on full-disclosure August 6th.

OH NOEZ! U G0TZ MY CVSWEB COOKEEZ!

Only two remote holes in the default install, in more than 10 years (opens in new tab)