oss-security - Re: vsftpd CVE-2007-5962 (Red Hat / Fedora specific)

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / news community lists wiki CVSweb mirrors signatures
bringing security into open environments

Password Recovery Resources on the Net

[<prev] [next>] [<thread-prev] [thread-next>] [month] [year] [list]

Date: Wed, 21 May 2008 15:58:37 -0400
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com,
        Jonathan Smith <smithj@...ethemallocs.com>
cc: chris@...ry.beasts.org
Subject: Re: vsftpd CVE-2007-5962 (Red Hat / Fedora specific)

On 21 May 2008, Jonathan Smith wrote:
> Tomas Hoger wrote:
> > This is just a heads-up.  We are releasing updated vsftpd packages
> > containing a fix for a minor memory leak identified by CVE-2007-5962.
> 
> The memory leak itself is CVE-2007-5962? Or is the CVE for the original
> issue where deny_hosts didn't work as expected? It doesn't seem to be
> public.
> 

The leak is CVE-2007-5962.  deny_hosts not working did not get a CVE id.

-- 
    JB

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.