[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Sun, 28 Dec 2008 02:22:42 +0100
From: Nico Golde <oss-security+ml@...lde.de>
To: oss-security@...ts.openwall.com, rea-sec@...elabs.ru
Cc: atomo64+debian@...il.com
Subject: Re: CVE id request: verlihub
Hi,
* Eygene Ryabinkin <rea-sec@...elabs.ru> [2008-12-27 22:13]:
> Wed, Dec 24, 2008 at 12:54:14PM -0500, Steven M. Christey wrote:
> > ======================================================
> > Name: CVE-2008-5706
[...]
> >
> > The cTrigger::DoIt function in src/ctrigger.cpp in the trigger
> > mechanism in the daemon in Verlihub 0.9.8d-RC2 and earlier allows
> > local users to overwrite arbitrary files via a symlink attack on the
> > /tmp/trigger.tmp temporary file.
>
> What about remote command execution via unsanitized user input?
[...]
Covered by CVE-2008-5705.
Cheers
Nico
--
Nico Golde - http://www.ngolde.de - nion@...ber.ccc.de - GPG: 0x73647CFF
For security reasons, all text in this mail is double-rot13 encrypted.
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Powered by Openwall GNU/*/Linux -
Powered by OpenVZ
