httpd-cvs mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "William A. Rowe, Jr." <wr...@rowe-clan.net>
Subject Re: svn commit: r609953 - /httpd/httpd/branches/2.2.x/CHANGES
Date Tue, 08 Jan 2008 16:12:38 GMT
rpluem@apache.org wrote:
> +  *) SECURITY: CVE-2008-0005 (cve.mitre.org)

I thought we concur that (short of direct html injection in the page's
<head>) the browser misdetection of UTF-7, contrary on it's face to
RFC2616, was a client specific problem?  If so, this is a "related to
CVE-2008-0005" footnote, not the topic.

Bill

Mime
View raw message