oss-security - Re: CVE Request -- OCSNG_UNIX

Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Mon, 1 Feb 2010 16:12:54 -0500 (EST)
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com
Cc: "Steven M. Christey" <coley@...us.mitre.org>
Subject: Re: CVE Request -- OCSNG_UNIX_SERVER-1.02.2

----- "Jan Lieskovsky" <jlieskov@...hat.com> wrote:

> Hi Josh, Steve, vendors,
> 
>    multiple security issues have been reported against
> OCS Inventory NG Management server for Unix/Linux.
> 
> References:
> 
> [1] http://secunia.com/advisories/38311/
> [2]
> http://www.packetstormsecurity.org/1001-exploits/ocsinventoryng-sqlxss.txt
> [3] http://www.ocsinventory-ng.org/index.php?page=1-02-1
> [4]
> http://launchpad.net/ocsinventory-server/stable-1.02/stable-release-1.02.2/+download/OCSNG_UNIX_SERVER-1.02.2.tar.gz
> 
> Could you allocate CVE ids for these?
> 

I'm going to defer this one to MITRE. I don't have time to properly assign
IDs for this.

Thanks.

-- 
    JB

-- 
    JB

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.