Bugtraq mailing list archives

Re: CVS woes: .cvspass

From: Delian Krustev <krustev () krustev net>
Date: Thu, 29 Jul 2004 16:31:40 +0300

On Tuesday 27 July 2004 23:20, Greg A. Woods wrote:

Anyone using the CVS pserver mechanism for anything other than totally
anonymous access gets only what they deserve.


brr, do not forget that the security might be guaranteed on different
layers. E.g. ipsec secures the insecure protocols(the ones that transfer
data in plain text or with weak encryption), such as telnet or cvs
with pserver.

Current thread:

CVS woes: .cvspass Chiaki (Jul 26)
- Re: CVS woes: .cvspass Valdis . Kletnieks (Jul 27)
  - Re: CVS woes: .cvspass Andreas Beck (Jul 28)
- Re: CVS woes: .cvspass Greg A. Woods (Jul 27)
  - Re: CVS woes: .cvspass Delian Krustev (Jul 30)