From: Martin Kraemer Date: Fri, 22 Mar 2002 07:34:57 +0000 (+0000) Subject: Typo X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=5eea1edfd1af60ed9ba10266a5aeee72a5f51f84;p=thirdparty%2Fapache%2Fhttpd.git Typo git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@94123 13f79535-47bb-0310-9956-ffa450edef68 --- diff --git a/src/CHANGES b/src/CHANGES index a619c81be21..cf59238f557 100644 --- a/src/CHANGES +++ b/src/CHANGES @@ -8,7 +8,7 @@ Changes with Apache 1.3.24 *) Introduce proper escaping of command.com and cmd.exe for Win32. These patches close vulnerability CAN-2002-0061, identified and reported by Ory Segal , by which any CGI - invocation of .bat or .cmd files could comprimize the system + invocation of .bat or .cmd files could compromise the system when the .bat or .cmd was parsed the query args as an argument to either cmd.exe /c or command.com /c. [William Rowe]