Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
From:	"Dave Korn" <dk AT artimi DOT com>
To:	<cygwin AT cygwin DOT com>
Subject:	RE: [ADMIN] cygwin package search temporarily disabled
Date:	Wed, 14 Jul 2004 18:43:59 +0100
MIME-Version:	1.0
In-Reply-To:	<20040713012048.GA13724@trixie.casa.cgf.cx>
Message-ID:	<NUTMEGRf6Ci6nx8dyDd000008ac@NUTMEG.CAM.ARTIMI.COM>
X-OriginalArrivalTime:	14 Jul 2004 17:43:59.0953 (UTC) FILETIME=[25130410:01C469CA]

> -----Original Message-----
> From: cygwin-owner  On Behalf Of Christopher Faylor
> Sent: 13 July 2004 02:21

> On Mon, Jul 12, 2004 at 10:18:00PM +0200, Corinna Vinschen wrote:
> >Folks,
> >
> >the "Search package list" functionality on 
> http://cygwin.com/packages/
> >has been temporarily disabled due to security considerations. 
> >
> >I can't say for how long this service will be down, but it 
> will probably
> >be a few days.
> >
> >
> >Sorry for the inconvenience,
> 
> The scripts are back online now.
> 
> cgf


  Remote command execution through incorrect escaping of shell metachars,
then?  Thought there might be a way to get it to do that.


    cheers, 
      DaveK
-- 
Can't think of a witty .sigline today....


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

- Raw text -