[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-Id: <201202281632.q1SGWfM1002068@linus.mitre.org>
Date: Tue, 28 Feb 2012 11:32:41 -0500 (EST)
From: cve-assign@...re.org
To: mateusz.goik@...antsoft.pl
Cc: cve-assign@...re.org, oss-security@...ts.openwall.com
Subject: Re: CVE Status Clarification / Request -- kadu: Stored XSS by parsing contact's status and sms messages in history
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
>Any javascript code could be executed from Kadu History Window in
>following conditions:
CVE-2012-1410 is assigned to this Kadu issue.
We are confused about
https://bugzilla.novell.com/show_bug.cgi?id=749036
This is a bug report about this Kadu vulnerability, but it has a CVE
assignment of CVE-2006-7248 for a vulnerability in the
SMIME_read_PKCS7 function in OpenSSL 0.9.7i. Our perspective is that
this means CVE-2006-7248 has been assigned to multiple issues (the
Kadu issue and the OpenSSL issue), so we'll now proceed to REJECT
CVE-2006-7248 sometime later today unless there's a substantial
objection.
- --
CVE assignment team, MITRE CVE Numbering Authority
M/S S145
202 Burlington Road, Bedford, MA 01730 USA
[ PGP key available through http://cve.mitre.org/cve/obtain_id.html ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (SunOS)
iQEcBAEBAgAGBQJPTQBKAAoJEGvefgSNfHMdhXYH/0B7xfkZkD7025beh/Digvpd
48hm8IRtRSbv8UVqsfq+jVjMUlD0blXjhKbli9OBl0xFcMGjZjxnC/3Rt4RZDib4
AAUs9nEp1zB7dvjmsItkOCJk7Cn9CFVk4qCjSSEaz0tjrUXasf6nNsePwDht9zw6
DM8ECv95CHiZ6V7+ZKAfwMRrMpYNxl3WtPGTVxUr9jfhiVvM8qgUvBlhJci4RJs3
XgXxOTynLlMGYZTzY6zX5TJzOxnuojnmsAedwtYJpRMSBmX9TY/Dx356xjoehQUk
Swg1IMVM+OcogYRBF5tS6QxrfefM1RDd4YgM0j+dcFA/5xjFLCs1yRY+6Ne0uo8=
=lXSm
-----END PGP SIGNATURE-----
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
