oss-security - Re: CVE request: davfs2 - Unsecure use of system()

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Tue, 17 Sep 2013 20:43:28 -0700
From: Tavis Ormandy <taviso@...xchg8b.com>
To: oss-security@...ts.openwall.com
Subject: Re: CVE request: davfs2 - Unsecure use of system()

Luciano Bello <luciano@...ian.org> wrote:

> Hi,
>    A security vulnerability have been reported in davfs2 
> http://bugs.debian.org/723034
> 
> Please, assign a CVE id.
> 
> Thanks, luciano
> 

I feel obliged to point at this ;-)

http://article.gmane.org/gmane.comp.shells.dash/841

Tavis.


-- 
-------------------------------------
taviso@...xchg8b.com | pgp encrypted mail preferred
-------------------------------------------------------

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.