Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Tue, 8 Jul 2008 13:53:48 -0400 (EDT)
From: "Steven M. Christey" <coley@...us.mitre.org>
To: Jonathan Smith <smithj@...ethemallocs.com>
cc: vim_dev@...glegroups.com, "Steven M. Christey" <coley@...us.mitre.org>,
        "Charles E Campbell, Jr" <drchip@...pbellfamily.biz>,
        oss-security@...ts.openwall.com
Subject: Re: More arbitrary code executions in Netrw version 125, Vim 7.2a.10


On Mon, 7 Jul 2008, Jonathan Smith wrote:

> Steve, could we get CVEs assigned, please? I'd imagine we'd need three;
> one for the tarplugin issue, one for the zipplugin, and one for the
> netrw issues (which are similar enough to probably justify lumping them
> together).

CVE-2008-3074 - tarplugin
CVE-2008-3075 - zipplugin
CVE-2008-3076 - netrw issues

These will be filled in later.

- Steve

Powered by blists - more mailing lists

Your e-mail address:

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Powered by Openwall GNU/*/Linux - Powered by OpenVZ