[Xitami] Xitami DOS reported, fixed

[Thomas J. Hruska]

At 05:30 AM 7/22/2004 -0500, Craig Morrison writeth:
>Pieter Hintjens wrote:
>
>> Although the report was posted on the 15th, we received it this morning,
so 
>> there is some chance that people have exploited this against Xitami
servers 
>> in the meantime.
>
>Peter, I believe that is the date the DoS was discovered not the day it 
>was posted. I just received the report here also.
>
>It would be nice if people would contact the vendors first before public 
>disclosure. Alas, this isn't a perfect world though.

Public disclosure of security holes and bugs seem to be the only way Xitami
gets updated around here as all of mine that I've discovered have not been
fixed.  As tempting as it is to tell the world about them (and hence get
them fixed), I'll just keep my mouth shut to be courteous to the authors.


          Thomas J. Hruska -- shinelight@shininglightpro.com
Shining Light Productions -- "Meeting the needs of fellow programmers"
                     http://www.slproweb.com/

`'*-~.,_,.~-*'`'*-~.,_,.~-*'`'*-~.,_,.~-*'`'*-~.,_,.~-*'`'*-~.,_,.~-*'`'*-~
  Tired of expensive, buggy web servers that you have to constantly patch
  and worry about every waking moment?  Try ProtoNova today!

  http://www.slproweb.com/products/ProtoNova.html

  Announcing ProtoNova v2.0, the secure, alternative web server to IIS and
  Apache that brings peace of mind to let you sleep at night.