oss-security - CVE Request -- OCSNG_UNIX

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Mon, 01 Feb 2010 18:58:50 +0100
From: Jan Lieskovsky <jlieskov@...hat.com>
To: oss-security <oss-security@...ts.openwall.com>
CC: "Steven M. Christey" <coley@...us.mitre.org>
Subject: CVE Request -- OCSNG_UNIX_SERVER-1.02.2

Hi Josh, Steve, vendors,

   multiple security issues have been reported against
OCS Inventory NG Management server for Unix/Linux.

References:

[1] http://secunia.com/advisories/38311/
[2] http://www.packetstormsecurity.org/1001-exploits/ocsinventoryng-sqlxss.txt
[3] http://www.ocsinventory-ng.org/index.php?page=1-02-1
[4] http://launchpad.net/ocsinventory-server/stable-1.02/stable-release-1.02.2/+download/OCSNG_UNIX_SERVER-1.02.2.tar.gz

Could you allocate CVE ids for these?

Thanks && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Response Team

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.