oss-security - Re: CVE requests: freebsd kernel/tesseract/xinha/proftpd

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <1538145496.192012.1298495409359.JavaMail.root@zmail01.collab.prod.int.phx2.redhat.com>
Date: Wed, 23 Feb 2011 16:10:09 -0500 (EST)
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com
Cc: coley <coley@...re.org>
Subject: Re: CVE requests: freebsd
 kernel/tesseract/xinha/proftpd

Steve,

Can MITRE handle this one. It's getting old and I'm starting to think
I won't be able to get to it before the week ends.

Thanks.

-- 
    JB

----- Original Message -----
> Hi,
> Please assign CVE IDs for the following issues from the Debian
> Security Tracker:
> 
> 1. FreeBSD kernel: local DoS
> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=613312
> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=611476
> http://www.exploit-db.com/exploits/16064/
> http://svn.debian.org/wsvn/glibc-bsd/branches/squeeze/kfreebsd-8/debian/patches/000_tcp_usrreq.diff
> 
> 2. Xinha: Multiple vulnerabilities
> (The code is included in a few web apps, e.g. serendipity, openacs or
> dotlrn)
> http://secunia.com/advisories/40669/
> 
> 3. tesseract: Insecure temp file handling
> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=612032
> 
> 4. proftpd mod_sftp integer overflow
> http://bugs.proftpd.org/show_bug.cgi?id=3586
> http://www.exploit-db.com/exploits/16129/
> 
> Cheers,
> Moritz

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.