[17867] in bugtraq
Re: bitchx remote xploit
daemon@ATHENA.MIT.EDU (Tim Powers)
Thu Nov 30 19:30:24 2000
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Message-Id: <200011301949.eAUJnOb30517@ragnarok.devel.redhat.com>
Date: Thu, 30 Nov 2000 14:49:24 -0500
Reply-To: timp@redhat.com
From: Tim Powers <timp@REDHAT.COM>
To: BUGTRAQ@SECURITYFOCUS.COM
In-Reply-To: <Pine.LNX.4.21.0011282315340.948-100000@apolo>; from
raise@BIOGATE.COM on Tue, Nov 28, 2000 at 11:30:08PM +0100
>
> I got client from bitchx.com and i compiled it.. i didn't know that debian
> 2.2 had bitchx fixed :(. I'm sorry about the comment "tested in debian
> 2.2", it can be misinterpreted.
Please note that the invite vulnerability was fixed for Red Hat Powertools in
July as well, advisory RHSA-2000:042-01. Red Hat Powertools 7 is also not
vulnerable to this.
Tim Powers
Systems Engineer
Red Hat, Inc.