Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Wed, 2 Mar 2011 18:05:45 -0500 (EST)
From: "Steven M. Christey" <>
Subject: Re: CVE requests: freebsd kernel/tesseract/xinha/proftpd

On Mon, 21 Feb 2011, Moritz Muehlenhoff wrote:

> 1. FreeBSD kernel: local DoS

Use CVE-2011-1132

> 2. Xinha: Multiple vulnerabilities
> (The code is included in a few web apps, e.g. serendipity, openacs or dotlrn)

CVE-2011-1133 - XSS in mode param to 
plugins/ExtendedFileManager/backend.php (David Vieira-Kurz)

CVE-2011-1134 - file upload

CVE-2011-1135 - XSS at end of URL to 
plugins/ExtendedFileManager/manager.php and 
plugins/ImageManager/manager.php (Riss McRee)

> 3. tesseract: Insecure temp file handling


> 4. proftpd mod_sftp integer overflow


- Steve

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.