[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <Pine.GSO.4.64.1106072223490.25087@faron.mitre.org>
Date: Tue, 7 Jun 2011 22:26:03 -0400 (EDT)
From: "Steven M. Christey" <coley@...-smtp.mitre.org>
To: oss-security@...ts.openwall.com
Subject: Re: CVE request: Multiple security vulnerabilities
in ARSC Really Simple Chat
On Thu, 2 Jun 2011, Henri Salo wrote:
> https://sourceforge.net/tracker/?func=detail&aid=3310673&group_id=32699&atid=406296
This vector was apparently discovered by Henri and not HT-Bridge, so this
gets a separate identifier than the others.
Use CVE-2011-2470 for the arsc_message parameter to
chat/base/admin/login.php.
- Steve
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
