oss-security - Re: CVE Request -- Conky 1.8.1 "/tmp/.cesf" Insecure Temporary File Security Issue

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <4495cba8-d6d6-4878-ae5f-950730497b58@zmail01.collab.prod.int.phx2.redhat.com>
Date: Mon, 10 Oct 2011 14:41:15 -0400 (EDT)
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com
Subject: Re: CVE Request -- Conky 1.8.1 "/tmp/.cesf" Insecure Temporary File Security Issue

Please use CVE-2011-3616

Thanks.

-- 
    JB


----- Original Message -----
> Hello,
> 
> Can a CVE be assigned for the below issue?
> 
> Conky 1.8.1 contains a vulnerability that allows malicious, local
> users
> to perform certain actions with escalated privileges.
> 
> https://bugs.launchpad.net/ubuntu/+source/conky/+bug/607309
> http://secunia.com/advisories/43225/
> 
> 
> Thanks,
> 
> --
> Sean Amoss
>

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.