OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: INN: guilty of syslog() format string breakage?
From: Chris Evans (chrisferret.lmh.ox.ac.uk)
Date: Wed Jun 28 2000 - 19:54:43 CDT


On Wed, 28 Jun 2000, Daniel Jacobowitz wrote:

> Well, without looking at the remainder of the code, I can tell you that
> it almost certainly is. If there is a single place where we have free
> control over what is logged, it's no different than what I did
> yesterday for statd. Do normal users have control over innfeed at all?
>
> Is this from inn2? Inn1 seems quite careful.

inn-2.2.2

Chris