[HECnet] Security hole in CSWS

On Mon, Sep 21, 2009 at 08:17:02PM +0100, Sampsa Laine wrote: Guys, What do you guys think, worth getting in touch with HP? I think this could be a potential disaster waiting to happen... A VMS Guru friend of mine replied with this: ======================================================================= Not surprising. I would guess that the source code makes some bad assumptions about file specifications. It should definitely be reported to HP. ======================================================================= -brian -- "Coding in C is like sending a 3 year old to do groceries. You gotta tell them exactly what you want or you'll end up with a cupboard full of pop tarts and pancake mix." -- IRC User (http://www.bash.org/?841435)