Date: Mon, 11 Apr 2011 16:20:07 -0400 (EDT) From: Josh Bressers <bressers@...hat.com> To: oss-security@...ts.openwall.com Cc: coley <coley@...re.org> Subject: Re: pure-ftpd STARTTLS command injection / new CVE? ----- Original Message ----- > Hi, > > http://www.pureftpd.org/project/pure-ftpd/news > > states that pure-ftpd is affected by the same STARTTLS > injection bug as postifx's CVE-2011-0411. > > Is this CVE postfix-specific or can it be used for > pure-ftpd as well? If needed, can someone assign a new CVE? > Use CVE-2011-1575 for this. Thanks. -- JB
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Powered by Openwall GNU/*/Linux - Powered by OpenVZ