[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <732932511.2320481284411612307.JavaMail.root@zmail01.collab.prod.int.phx2.redhat.com>
Date: Mon, 13 Sep 2010 17:00:12 -0400 (EDT)
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com
Cc: coley <coley@...re.org>
Subject: Re: CVE request: mailscanner, multiple
vulnerabilities
----- "Raphael Geissert" <geissert@...ian.org> wrote:
>
> I reported some vulnerabilities in mailscanner but forgot to assign ids.
> Could somebody assign ones?
>
> Incomplete fix for CVE-2008-5313:
> http://bugs.debian.org/596403
Please use CVE-2010-3095
>
> update{_bad,}_phishing_sites scripts may download and use spoofed
> files:
> http://bugs.debian.org/596396
CVE-2010-3292
>
> Local users may prevent virus signatures from being updated:
> http://bugs.debian.org/596397
>
CVE-2010-3293
Thanks
--
JB
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
