Re: VERY CRITICAL: Security Patch for mj_wwwusr

On Fri, Feb 04, 2011 at 05:12:26PM -0600, Jason L Tibbitts III wrote:
> >>>>> "MGF" == Marc G Fournier <[email protected]> writes:
> 
> MGF> Someone just pointed out to me that something like:
> MGF> mj_wwwusr?passw=&list=GLOBAL&user=&func=help&extra=/../../../../../../../../etc/rc.conf
> MGF> Will allow you to read files from the file system
> 
> I fixed this in CVS not long ago.

any chance of a quick diff/patch so we can fix our existing systems
right away?

thanks!