Bug reports...

[Paul J Collins]

>>>>> "Kevin" == Kevin Colby <kevinc at grainsystems.com> writes:

    >> bugzilla has no inherent flaw if memory serves from the apache write-up
    >> - only a poor configuration issue.

    Kevin> Still, it's a lesson to learn from.  Be careful with this stuff.

I read the exploit report, and apparently the issue was covered in the
Bugzilla README, so Rule #1 is now:

 +-----------------------------------+
 |                                   |
 |  It's called README for a reason. |
 |                                   |
 +-----------------------------------+

Paul.

-- 
Paul Collins <sneakums at eircom.net> - - - - - [ A&P,a&f ]
 GPG: 0A49 49A9 2932 0EE5 89B2  9EE0 3B65 7154 8131 1BCD
 PGP: 88BA 2393 8E3C CECF E43A  44B4 0766 DD71 04E5 962C
"Linux: it's just this operating system, you know?"