[SECURITY] [DSA 249-1] New w3mmee packages fix cookie information leak

-------------------------------------------------------------------------- Debian Security Advisory DSA 249-1 [email protected] http://www.debian.org/security/ Martin Schulze February 11th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 249-1] New w3mmee packages fix cookie information leak

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 249-1 [email protected] http://www.debian.org/security/ Martin Schulze February 11th, 2003 http://www.debian.org/security/faq -...

CVE-2002-2245

ftpd in NetBSD 1.5 through 1.5.3 and 1.6 does not properly quote a digit in response to a STAT command for a filename that contains a carriage return followed by a digit, which can cause firewalls and other intermediary devices to lose proper track of the FTP session...

Re: Squid doesn't quote urls in error messages.

Hello Lincoln Yeoh, 27.10.00 13:47, you wrote: Squid doesn't quote urls in error messages.; L I noticed that Squid 2.3.STABLE4 doesn't quote urls in error L messages. skip L I haven't really tried it myself, and so I can't confirm if it really works L that's why it's in VULN-DEV ; . I can confirm...