Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
From: "Dave Korn" <dk AT artimi DOT com>
To: <cygwin AT cygwin DOT com>
Subject: RE: [ADMIN] cygwin package search temporarily disabled
Date: Wed, 14 Jul 2004 18:43:59 +0100
MIME-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"
Content-Transfer-Encoding: 7bit
In-Reply-To: <20040713012048.GA13724@trixie.casa.cgf.cx>
Message-ID: <NUTMEGRf6Ci6nx8dyDd000008ac@NUTMEG.CAM.ARTIMI.COM>
X-OriginalArrivalTime: 14 Jul 2004 17:43:59.0953 (UTC) FILETIME=[25130410:01C469CA]

> -----Original Message-----
> From: cygwin-owner  On Behalf Of Christopher Faylor
> Sent: 13 July 2004 02:21

> On Mon, Jul 12, 2004 at 10:18:00PM +0200, Corinna Vinschen wrote:
> >Folks,
> >
> >the "Search package list" functionality on 
> http://cygwin.com/packages/
> >has been temporarily disabled due to security considerations. 
> >
> >I can't say for how long this service will be down, but it 
> will probably
> >be a few days.
> >
> >
> >Sorry for the inconvenience,
> 
> The scripts are back online now.
> 
> cgf


  Remote command execution through incorrect escaping of shell metachars,
then?  Thought there might be a way to get it to do that.


    cheers, 
      DaveK
-- 
Can't think of a witty .sigline today....


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/