oss-security - Re: CVE request: dovecot unauthorized login

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / community lists wiki CVSweb mirrors signatures
bringing security into open environments

This website is powered by Openwall GNU/*/Linux security-enhanced OS

[<prev] [next>] [<thread-prev] [month] [year] [list]

Date: Mon, 10 Mar 2008 18:54:35 -0400 (EDT)
From: "Steven M. Christey" <coley@...us.mitre.org>
To: Jonathan Smith <smithj@...ethemallocs.com>
Subject: Re: CVE request: dovecot unauthorized login

On Mon, 10 Mar 2008, Jonathan Smith wrote:

> So, we shouldn't be using CVE-2008-1218 for this (as you indicated
> yesterday)?

Sorry - yes, you should.  Kill CVE-2008-1271.

I'm trying to assign CVE's a little more quickly without writing them up
right away, which means a faster response for everyone - but obviously I'm
not yet handling this well :-(

- Steve

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.