[15870] in bugtraq
Re: Alert: Buffer Overrun is O'Reilly WebsitePro httpd32.exe
daemon@ATHENA.MIT.EDU (Dan Harkless)
Thu Jul 20 17:06:42 2000
Message-ID: <200007201831.LAA18214@dilvish.speed.net>
Date: Thu, 20 Jul 2000 11:31:36 -0700
Reply-To: Dan Harkless <dan-bugtraq@DILVISH.SPEED.NET>
From: Dan Harkless <dan-bugtraq@DILVISH.SPEED.NET>
To: BUGTRAQ@SECURITYFOCUS.COM
In-Reply-To: Message from Cerberus Security Team <cst@CERBERUS-INFOSEC.CO.UK>
of "Wed, 19 Jul 2000 15:47:07 +0100."
<002301bff190$3723c920$0302020a@cerberusinfosec.co.uk>
Cerberus Security Team <cst@CERBERUS-INFOSEC.CO.UK> writes:
[...]
> Vendor Status
> *************
> O'Reilly were informed of this on 23rd of June 2000, and the issue has been
> fixed in the 2.5 release available at
> http://software.oreilly.com/support/software/wsp2x_updates.cfm.
[...]
That URL is incorrect. The host is website.oreilly.com, not
software.oreilly.com.
----------------------------------------------------------------------
Dan Harkless | To prevent SPAM contamination, please
dan-bugtraq@dilvish.speed.net | do not mention this private email
SpeedGate Communications, Inc. | address in Usenet posts. Thank you.