Dear Rene

> Rene Engelhard <r...@debian.org> [2008-12-24 14:54]:
>
[...]

Thanks for your elaboration.

> Note Steffen didn't say /etc/passwd or so but any file on the system
> the user has rights on.
>

See your statement: what can I add :)  "the user has rights on" --
that's exactly not "arbitrary".

Anyway, the vulnerability is fixed in sf.net's subversion repository
of muttprint.  A release v0.73 will follow very soon including the
announcement.

Btw. I have never had the intention to offend Steffen or
anybody else.  Please accept my appologies if my reply made you
feel offended.  I just challenged the imprecise wording of
"arbitrary".

Merry Christmas.

wbr,
Lukas
-- 
Lukas Ruf



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to