Date: Fri, 28 Nov 2008 17:20:54 -0600 From: Raphael Geissert <atomo64+debian@...il.com> To: oss-security@...ts.openwall.com Subject: CVE id request/update: mailscanner: many scripts allow local users to overwrite arbitrary files via symlink attacks -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, A week ago I reported some more issues in mailscanner other than those mentioned in CVE-2008-5140 at , but it looks like the mail copy sent to bugtraq was never really delivered or got rejected. Could the current CVE id be updated or a new one assigned please? Thanks in advance.  http://bugs.debian.org/506353 Regards, - -- Raphael Geissert - Debian Maintainer www.debian.org - get.debian.net -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iEYEARECAAYFAkkwfNYACgkQYy49rUbZzlpLBwCfVo+ghoxKPzjYI7OCcdDhxrBt MHUAn1wyGHJR28rpa+TXeWIqIy2HTpdN =jcCS -----END PGP SIGNATURE-----
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.