Re: [WEB SECURITY] new class of exploitable (remote code) perl format string

[Jason Dixon <jason@xxxxxxxxxxxxxx>]

On Nov 30, 2005, at 12:10 PM, Randal L. Schwartz wrote:

> > > > > > "Jeremiah" == Jeremiah Grossman <jeremiah@xxxxxxxxxxxxxxx>  
> > > > > > writes:
>
> Jeremiah> Danger level rises for Perl flaws
> Jeremiah> http://news.com.com/Danger+level+rises+for+Perl+flaws/
> Jeremiah> 2100-1002_3-5975954.html?part=rss&tag=5975954&subj=news
>
> I've seen the details, and I'm angry with the reporting.  The problem
> is not *Perl*. The problem is *undereducated Perl Programmers*.

As if folks were just *now* realizing Webmin is an insecure hunk of  
crap.

--
Jason Dixon
DixonGroup Consulting
http://www.dixongroup.net




---------------------------------------------------------------------
The Web Security Mailing List
http://www.webappsec.org/lists/websecurity/

The Web Security Mailing List Archives
http://www.webappsec.org/lists/websecurity/archive/