Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Tue, 30 Apr 2013 19:28:28 -0400 (EDT)
From: David Jorm <>
Subject: Re: Re-emergence of CVE-2008-4796 in Nagios current

> CVE-2008-4796 snoopy: command execution via shell metacharacters
> Was found in Nagios core by Grant Murphy.
> Filed upstream:
> We really need to start thinking about ways to find vulnerable copies
> of code and fixing them everywhere people have embedded them.

Debian uses clonewise:

It is the best solution I've seen so far. It's been on my TODO list forever and a day to get it running for Fedora.


Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.