[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <Pine.GSO.4.51.0902031612000.3146@faron.mitre.org>
Date: Tue, 3 Feb 2009 16:13:44 -0500 (EST)
From: "Steven M. Christey" <coley@...us.mitre.org>
To: oss-security <oss-security@...ts.openwall.com>,
oss-security <oss-security@...ts.openwall.com>
cc: "Steven M. Christey" <coley@...us.mitre.org>
Subject: Re: CVE Request - php (PHP BZ#27421)
On Fri, 30 Jan 2009, Jan Lieskovsky wrote:
> this PHP issue looks to desire a new CVE id.
>
> References:
> http://bugs.php.net/bug.php?id=27421
> https://bugzilla.redhat.com/show_bug.cgi?id=479272
>
What attack scenario exists for this issue? One virtual-host user can
effectively DoS other virtual hosts running on the same Apache instance?
- Steve
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
