再保险(CD): CD建议:SF-EXEC(软件缺陷在多个可执行文件)

> 4)如果P1和P2的开发方法是相同的(>异常可执行的剥削),和>剥削的结果是相同的,那么P1和P2应该合并。为了应对SF-LOC同样作为我的消息。> * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * > > - 2000 - 0213(水鹿服务器,呼应。蝙蝠和你好。蝙蝠都称之为“回声”>和支持元字符)。> > SF-EXEC。4,SF-EXEC。6、SF-EXEC。7建议合并。“补丁”是>删除批处理文件,这两个包含相同的脆弱>“回声”命令。这就是我所说的。你是合并这两个仅仅因为他们有相同的问题,可以利用同样的方式,但他们显然没有代码共享。 You would run into the same problem with things like system() calls in applications or metacharacters of CGI programs while opening files. They are so common and you can exploits pretty much each one in the same way you want to merge them. But they are each a different vulnerability. I would vote to SPLIT these two. -- Elias Levy SecurityFocus.comhttp://www.securityfocus.com/如果那么,对位小独木船