oss-security - Re: CVE request: phpmyadmin

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / news community lists wiki CVSweb mirrors signatures
bringing security into open environments

Password Recovery Resources on the Net

[<prev] [next>] [<thread-prev] [thread-next>] [month] [year] [list]

Date: Wed, 16 Jul 2008 13:36:33 +0200
From: Hanno Böck <hanno@...eck.de>
To: oss-security@...ts.openwall.com
Subject: Re: CVE request: phpmyadmin < 2.11.7.1

Am Dienstag 15 Juli 2008 schrieb Thijs Kinkhorst:
> On Tuesday 15 July 2008 21:00, Hanno Böck wrote:
> > From Changelog:
> > - protection against XSS when register_globals is on and .htaccess
> >   has no effect, thanks to Tim Starling
>
> Note: this has already been assigned CVE-2008-2960 following a previous
> request from you.

This line is from the 2.11.7.1-changelog, while cve-2008-2960 has been fixed 
in 2.11.7. So either their changelogs are mixed up or it's a different issue.

-- 
Hanno Böck		Blog:		http://www.hboeck.de/
GPG: 3DBD3B20		Jabber/Mail:	hanno@...eck.de

[ CONTENT OF TYPE application/pgp-signature SKIPPED ]

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.