HylaFAX The world's most advanced open source fax server

[Date Prev][Date Next][Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Faxsurvey security hole: How to patch?



On Mon, Aug 10, 1998 at 04:39:08PM -0400, Nico Kadel-Garcia wrote:
> 
> So I've been thinking about the faxsurvey security hole, and while
> thinking somebody took *ANOTHER* shot at my password file through my
> web server and that script (which failed, fortunately!)
> 
> Should I write a patch for the source code to delete faxsurvey and all
> references to it? Or should I write an after-installation patch to
> replace it with a "disabled for security" message?

No need for a patch. I'll delete the script from the source
distribution in pl3 (until someone writes a better one).

	matthias




Project hosted by iFAX Solutions