oss-security - Re: CVE Request: Post Revolution multiple security vulnerabilities

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <1503554961.398662.1306873661016.JavaMail.root@zmail01.collab.prod.int.phx2.redhat.com>
Date: Tue, 31 May 2011 16:27:41 -0400 (EDT)
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com
Cc: coley <coley@...re.org>
Subject: Re: CVE Request: Post Revolution multiple security
 vulnerabilities

IDs inline.

----- Original Message -----
> Hi, I need a CVE for Post Revolution 0.8c multiple security
> vulnerabilities. (Post Revolution is a CMS similar to Wordpress
> released under GPLv2)
> 
> The vulnerabilities are:
> 1. A Denial of service vulnerability.
    CVE-2011-1952

> 2. Cross-site scripting vulnerabilities.
    CVE-2011-1953

> 3. Cross-site request forgery vulnerabilities.
    CVE-2011-1954

> 
> Vendor has publicly confirmed the existence of the vulnerabilities:
> http://translate.google.com/translate?u=http%3A%2F%2Fpostrev.com.ar%2F&sl=es&tl=en&hl=&ie=UTF-8
> I will wait for vendor to fully patch these issues before
> full-disclosure (probably by Friday)

Thanks.

-- 
    JB

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.