oss-security - Re: CVE request: TYPO3-SA-2010-020

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Mon, 11 Oct 2010 16:06:37 -0400 (EDT)
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com
Cc: coley <coley@...re.org>
Subject: Re: CVE request: TYPO3-SA-2010-020


----- "Moritz Muehlenhoff" <jmm@...ian.org> wrote:

> Hi,
> Please assign CVE IDs for the following issues:
> http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-020/
> 

I'm going to give this four. We can split the XSS and remote file
disclosure later if it's found they affect different versions.

CVE-2010-3714 typo3-sa-2010-20 Multiple Remote File Disclosure
CVE-2010-3715 typo3-sa-2010-20 Multiple XSS
CVE-2010-3716 typo3-sa-2010-20 Privilege Escalation
CVE-2010-3717 typo3-sa-2010-20 DoS

Thanks.

-- 
    JB

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.