Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Mon, 7 Jun 2010 11:03:29 -0400 (EDT)
From: "Steven M. Christey" <coley@...us.mitre.org>
To: oss-security@...ts.openwall.com
Subject: Re: CVE request: zonecheck


On Tue, 1 Jun 2010, Josh Bressers wrote:

>> Hi,
>>
>> there is a cross-scripting issue in zonecheck's CGI, up to version
>> 2.1.0
>> (fixed upstream in 2.1.1):
>>
>>   http://bugs.debian.org/583290
>>   https://savannah.nongnu.org/bugs/?29967
>>   http://www.xssed.com/mirror/61096/
>>
>
> Please use CVE-2010-2052

I inadvertently assigned a duplicate, CVE-2010-2155, after this initial 
assignment.  Since CVE-2010-2155 is already widespread based on Google 
counts, we should keep it, and reject the CVE-2010-2052 that was assigned 
by Josh.

Sorry about that, my fault...

- Steve

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.