oss-security - Re: CVE id request: coccinelle

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <Pine.GSO.4.51.0905212028580.18536@faron.mitre.org>
Date: Thu, 21 May 2009 20:29:02 -0400 (EDT)
From: "Steven M. Christey" <coley@...us.mitre.org>
To: oss-security@...ts.openwall.com
cc: "Steven M. Christey" <coley@...us.mitre.org>
Subject: Re: CVE id request: coccinelle


======================================================
Name: CVE-2009-1753
Status: Candidate
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1753
Reference: MLIST:[oss-security] 20090506 CVE id request: coccinelle
Reference: URL:http://www.openwall.com/lists/oss-security/2009/05/06/2
Reference: CONFIRM:http://packages.debian.org/changelogs/pool/main/c/coccinelle/coccinelle_0.1.7.deb-3/changelog
Reference: BID:34848
Reference: URL:http://www.securityfocus.com/bid/34848
Reference: SECUNIA:35012
Reference: URL:http://secunia.com/advisories/35012

Coccinelle 0.1.7 allows local users to overwrite arbitrary files via a
symlink attack on an unspecified "result file."

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.