Date: Thu, 17 Apr 2008 22:18:01 +0200 From: Matthias Geerdsen <vorlon@...too.org> To: oss-security@...ts.openwall.com CC: "Steven M. Christey" <coley@...us.mitre.org> Subject: CVE request: DBMail <2.2.9 Hi, could we get a CVE for the following issue? From the dbmail changelog <http://dbmail.org/index.php?page=news&id=44>: Bugs fixed since 2.2.8: [...] 0000662: [Authentication layer] Ability to bypass authentication on Active Directory [...] bug report: <http://firstname.lastname@example.org/msg09942.html> patch: <http://git.dbmail.eu/?p=paul/dbmail;a=commitdiff;h=5a4458b9f4b1a1453e35a1c5674c2253b9d00138> -- Matthias Geerdsen vorlon@...too.org Gentoo Linux Security Team http://security.gentoo.org Download attachment "signature.asc" of type "application/pgp-signature" (190 bytes)
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.