oss-security - Re: CVE Status Clarification / Request -- kadu: Stored XSS by parsing contact's status and sms messages in history

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <4F4BB028.9010200@redhat.com>
Date: Mon, 27 Feb 2012 09:32:40 -0700
From: Kurt Seifried <kseifried@...hat.com>
To: oss-security@...ts.openwall.com
CC: Jan Lieskovsky <jlieskov@...hat.com>,
        "Steven M. Christey" <coley@...us.mitre.org>,
        Mariusz Fik <fisiu@...nsuse.org>,
        Rafał Malinowski
 <rafal.przemyslaw.malinowski@...il.com>,
        Radoslaw Lisowski <radoslaw.lisowski@...il.com>
Subject: Re: CVE Status Clarification / Request -- kadu: Stored
 XSS by parsing contact's status and sms messages in history

On 02/27/2012 03:05 AM, Jan Lieskovsky wrote:
> Hello Mariusz, Kurt, Steve, vendors,
> 
>   [1] though https://bugzilla.novell.com/show_bug.cgi?id=749036#c0
>   mentions CVE identifier has been already requested for this:
> 
>   "The bug still doesn't have CVE number but will have in near future."

I can only assume they requested one directly from Mitre. Steve, is this
the case? If not I'll assign one.



-- 
Kurt Seifried Red Hat Security Response Team (SRT)

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.