Date: Mon, 5 May 2008 12:51:28 -0400 (EDT) From: "Steven M. Christey" <coley@...us.mitre.org> To: oss-security@...ts.openwall.com cc: coley@...us.mitre.org Subject: Re: asterisk dupe? On Wed, 30 Apr 2008, Moritz Muehlenhoff wrote: > I think there's been a dupe in a recent CVE assignment for > asterisk. CVE-2008-1923 appears to be a duplicate of > CVE-2007-4103. These are most likely different based on different advisories from Asterisk, as well as different types of issue - CVE-2007-4103 is basically resource exhaustion via "malformed" handshakes, and CVE-2008-1923 involves Smurf-ish traffic amplification being sent to a spoofed address. - Steve
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.