[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Thu, 17 Apr 2008 22:18:01 +0200
From: Matthias Geerdsen <vorlon@...too.org>
To: oss-security@...ts.openwall.com
CC: "Steven M. Christey" <coley@...us.mitre.org>
Subject: CVE request: DBMail <2.2.9
Hi,
could we get a CVE for the following issue?
From the dbmail changelog <http://dbmail.org/index.php?page=news&id=44>:
Bugs fixed since 2.2.8:
[...]
0000662: [Authentication layer] Ability to bypass authentication on
Active Directory
[...]
bug report:
<http://www.mail-archive.com/dbmail-dev@dbmail.org/msg09942.html>
patch:
<http://git.dbmail.eu/?p=paul/dbmail;a=commitdiff;h=5a4458b9f4b1a1453e35a1c5674c2253b9d00138>
--
Matthias Geerdsen
vorlon@...too.org
Gentoo Linux Security Team
http://security.gentoo.org
Download attachment "signature.asc" of type "application/pgp-signature" (190 bytes)
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
