oss-security - Re: Duplicate CVE assigned: CVE-2011-2708 CVE-2011-2710

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20111108151040.GA31470@foo.fgeek.fi>
Date: Tue, 8 Nov 2011 17:10:40 +0200
From: Henri Salo <henri@...v.fi>
To: oss-security@...ts.openwall.com
Subject: Re: Duplicate CVE assigned: CVE-2011-2708
 CVE-2011-2710

On Sun, Nov 06, 2011 at 10:57:55PM +0100, Marcus Meissner wrote:
> On Sat, Nov 05, 2011 at 02:35:36PM +0200, Henri Salo wrote:
> > On Sun, Oct 16, 2011 at 04:23:29PM +0300, Henri Salo wrote:
> > > Are these duplicates:
> > > 
> > > CVE-2011-2708 was requested here: http://seclists.org/oss-sec/2011/q3/149
> > > CVE-2011-2710 was requested here: http://seclists.org/oss-sec/2011/q3/166
> > > 
> > > I did report about asking CVE to YGN Ethical Hacker Group and also when I received one.
> > 
> > This never got reply in here. I got email that I should contact MITRE to get this removed. They haven't replied to my emails at all. How to proceed?
> > 
> > I am really sorry about duplicate CVEs. :(
> 
> Did you mail the new cve-assign alias they have?
> 
> Ciao, Marcus

http://cve.mitre.org/cve/editorial_policies/duplicates.html

I contacted cve@...dress. I would also like to point out that they have never replied to any of my emails, which I have also heard from others.

Best regards,
Henri Salo

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.