oss-security - CVE request: thttpd: Denial of Service (App. crash, local)

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Wed, 12 Dec 2012 11:57:16 +0100
From: Matthias Weckbecker <mweckbecker@...e.de>
To: oss-security@...ts.openwall.com
Subject: CVE request: thttpd: Denial of Service (App. crash, local)

Hi Kurt, Steve, vendors, ...,

I think I have never posted it to oss-sec. glibc's crypt() can return NULL
under some circumstances which causes thttpd to crash while dereferencing:

  https://bugzilla.novell.com/show_bug.cgi?id=783165

Maybe you want to assign a CVE.

Matthias

-- 
Matthias Weckbecker, Senior Security Engineer, SUSE Security Team
SUSE LINUX Products GmbH, Maxfeldstr. 5, D-90409 Nuernberg, Germany
Tel: +49-911-74053-0;  http://suse.com/
SUSE LINUX Products GmbH, GF: Jeff Hawn, HRB 16746 (AG Nuernberg)

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.