gPS before 1.1.0 does not properly follow the rgpsp connection source acceptation policy as specified in the rgpsp.conf file, which could allow unauthorized remote attackers to connect to rgpsp.
Link | Tags |
---|---|
http://www.debian.org/security/2003/dsa-307 | patch vendor advisory |
http://gps.seul.org/changelog.html | patch |