[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-Id: <201201041450.q04EomXc023907@linus.mitre.org>
Date: Wed, 4 Jan 2012 09:50:48 -0500 (EST)
From: cve-assign@...re.org
To: krahmer@...e.de, oss-security@...ts.openwall.com
Cc: cve-assign@...re.org
Subject: Re: CVE-2011-4858 confusion
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
MITRE is still working on this. Our current perspective is that
CVE-2011-4084 is one vulnerability that was confirmed by the upstream
vendor, and CVE-2011-4858 is a different vulnerability that was not
confirmed by the upstream vendor. There are apparently related test
cases and test results that are not yet public.
- --
CVE assignment team, MITRE CVE Numbering Authority
M/S S145
202 Burlington Road, Bedford, MA 01730 USA
[ PGP key available through http://cve.mitre.org/cve/obtain_id.html ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (SunOS)
iQEcBAEBAgAGBQJPBGZMAAoJEGvefgSNfHMd3MsH+QE9+MihuCYpnTK0IUYFw4TO
kCB4GR6xR6UptA0R5UMPrJzwpXgL2N6dL7Vb3frLP+1/8h+66mgnF+pqJ++u78tz
lOOoBTWk+U3G7qvFSW1NKL7A+CdIPAVkFtgXM2NGlxB70YHbEHWzX3nrlnAIYNE2
TpVRfienHWm9THE9Q8e4k+b58oOKtnC9IhFGSAeLoogPv1ZUaqEibbM+KhsApyt8
1pHpm8OYqgwayjrUsI7wAQUrZ8zoyRKC4gvOam4d9APm0cSlvy38kHRh947e3C3p
qmijezwUJkImuJeILkkuHEN1wRHaED2MTHKKed3ym3d2ZkokiMdsHMp4I7TDvwY=
=bfZ9
-----END PGP SIGNATURE-----
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
