oss-security - NetworkManager CVE assignment

Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers

[<prev] [next>] [day] [month] [year] [list]

Date: Wed, 16 Dec 2009 16:12:42 -0500 (EST)
From: Josh Bressers <bressers@...hat.com>
To: oss-security <oss-security@...ts.openwall.com>,
        Dan Williams <dcbw@...hat.com>
Cc: coley <coley@...re.org>
Subject: NetworkManager CVE assignment

I just assigned two CVE ids for NetworkManager:

CVE-2009-4144 Possible connections to spoofed WPA Enterprise networks without validating network certificate
https://bugzilla.redhat.com/show_bug.cgi?id=546795


CVE-2009-4145 Information disclosure by nm-connection-editor
https://bugzilla.redhat.com/show_bug.cgi?id=546117


These were somewhat public before now.

Thanks.

-- 
    JB

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.