oss-security - Re: CVE Request -- OCSNG_UNIX

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <1720882979.772531265058774744.JavaMail.root@zmail01.collab.prod.int.phx2.redhat.com>
Date: Mon, 1 Feb 2010 16:12:54 -0500 (EST)
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com
Cc: "Steven M. Christey" <coley@...us.mitre.org>
Subject: Re: CVE Request -- OCSNG_UNIX_SERVER-1.02.2

----- "Jan Lieskovsky" <jlieskov@...hat.com> wrote:

> Hi Josh, Steve, vendors,
> 
>    multiple security issues have been reported against
> OCS Inventory NG Management server for Unix/Linux.
> 
> References:
> 
> [1] http://secunia.com/advisories/38311/
> [2]
> http://www.packetstormsecurity.org/1001-exploits/ocsinventoryng-sqlxss.txt
> [3] http://www.ocsinventory-ng.org/index.php?page=1-02-1
> [4]
> http://launchpad.net/ocsinventory-server/stable-1.02/stable-release-1.02.2/+download/OCSNG_UNIX_SERVER-1.02.2.tar.gz
> 
> Could you allocate CVE ids for these?
> 

I'm going to defer this one to MITRE. I don't have time to properly assign
IDs for this.

Thanks.

-- 
    JB

-- 
    JB

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.