oss-security - Re: CVE-2008-0352 is a dup of CVE-2007-4567

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / news community lists wiki CVSweb mirrors signatures
bringing security into open environments

Password Recovery Resources on the Net

[<prev] [next>] [<thread-prev] [month] [year] [list]

Date: Thu, 8 May 2008 10:28:12 +0100 (BST)
From: Mark J Cox <mjc@...hat.com>
To: oss-security@...ts.openwall.com
cc: "Steven M. Christey" <coley@...us.mitre.org>
Subject: Re: CVE-2008-0352 is a dup of CVE-2007-4567

> I believe CVE-2008-0352 is an accidental dup of CVE-2007-4567.  The
> referenced 2.6.21.2 commit[1] matches the commit used to originally
> address CVE-2007-4567 in Ubuntu's 2.6.20-based kernel[2].

Agreed.  Steve mentioned this to a few vendors back in Feb and we agreed 
that they were duplicates for the same issue.

Mark

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.