Re: [ZODB-Dev] CVE-2009-0668 and CVE-2009-0669: Releases to fix ZODB ZEO server vulnerabilities
Andreas Zeidler <[email protected]>
| Newsgroups | gmane.comp.web.zope.plone.installers |
|---|---|
| Message-ID | <[email protected]> |
On Aug 13, 2009, at 10:15 PM, Alexander Limi wrote: > Something like: > "If you are using the official Plone installers, you are configured > in such a way that only ZEO instances on your local network can > connect, [...]" "on your local network" should really read "on the same machine" here as 127.0.0.1 != network ;) > …or something like that. Modify for correctness etc, I didn't read > the disclosure in full (I'm still on vacation ;) enjoy! andi -- zeidler it consulting - http://zitc.de/ - [email protected] friedelstraße 31 - 12047 berlin - telefon +49 30 25563779 pgp key at http://zitc.de/pgp - http://wwwkeys.de.pgp.net/ plone 3.3rc5 released! -- http://plone.org/products/plone/ ------------------------------------------------------------------------------ Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july _______________________________________________ Plone-installers mailing list Plone-installers-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org https://lists.sourceforge.net/lists/listinfo/plone-installers
PGP.sig
(application/pgp-signature, 186 B) - not displayed