Date: Thu, 23 Jun 2011 15:49:35 -0400 (EDT) From: Josh Bressers <bressers@...hat.com> To: oss-security@...ts.openwall.com Cc: coley <coley@...re.org> Subject: Re: CVE requests: opie off by one and setuid() failure ----- Original Message ----- > Hi, > > Can someone assign 2 CVE's for a off by one in opiesu > and a missing setuid() retval check in opielogin which > leads to easy root compromise? Reviewed opie-2.4. > > Patches are available here: > > https://bugzilla.novell.com/show_bug.cgi?id=698772 > Here you go: CVE-2011-2489 opiesu Off by one CVE-2011-2490 opiesu missing setuid() check Thanks. -- JB
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Powered by Openwall GNU/*/Linux - Powered by OpenVZ