Re: Recent security announcement and csup/cvsup?

Hi,

> Can someone explain why the cvsup/csup infrastructure is considered
> insecure [...]

Speaking of cvsup security -- correct me if I'm wrong, but as far as I
know cvsup is generally vulnerable to man-in-the-attacks[0]. Hence I'd
be very happy about more and more people moving over to the portsnap
camp.

Best,
mel

[0] http://en.wikipedia.org/wiki/Portsnap
     http://unix.derkeiler.com/Mailing-Lists/FreeBSD/stable/2003-11/0287.html
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"