Fwd: sdr security alert

[Ghafour Taghizadeh]

FYI:

- ------- Forwarded Message


- - ------- Forwarded Message

Subject: sdr security alert
cc: okir at caldera.de, sdr at cs.ucl.ac.uk
Reply-To: sdr at cs.ucl.ac.uk
Date: Mon, 21 Jun 1999 15:04:01 +0100
Message-ID: <4605.929973841 at cs.ucl.ac.uk>
From: Colin Perkins <C.Perkins at cs.ucl.ac.uk>

- - - - -----BEGIN PGP SIGNED MESSAGE-----

A serious security problem has been discovered with sdr which will allow
remote intruders to execute arbitrary code with the privileges of the sdr
user. This problem exists in all recent versions of sdr and affects both
unix and windows versions.

We are working on fixing this problem, but until that fix becomes available
we recommend that you do not use sdr.

Thanks to Olaf Kirch for bringing this problem to our attention.

Colin Perkins/Kristian Hasler
Networked Multimedia Group
University College London


Ghafour