Subject: Re: CVS Vulnerability
To: None <hypno@sajberbettan.kennelsonline.net>
From: Daniel Carosone <dan@geek.com.au>
List: tech-security
Date: 01/21/2003 09:36:37
On Mon, Jan 20, 2003 at 10:58:02PM +0100, hypno@sajberbettan.kennelsonline.net wrote:
> 
> http://security.e-matters.de/advisories/012003.html
> 
> NetBSD CVS servers secure?

Yes. We were advised of the issue ahead of release and our servers
were patched, as were the in-tree sources.  The construction of
our anoncvs servers is such that they wouldn't have been vulnerable
to any useful exploit anyway.

--
Dan.