[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <87r4y3a63j.fsf@mid.deneb.enyo.de>
Date: Fri, 10 Feb 2012 01:24:00 +0100
From: Florian Weimer <fw@...eb.enyo.de>
To: oss-security@...ts.openwall.com
Subject: CVE request: surf
surf does not protect its cookie jar against access read access from
other local users, as reported by Jakub Wilk in this Debian bug:
<http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=659296>
Could someone please assign a CVE for this?
uzbl <http://uzbl.org/> (in the uzbl-browser wrapper script) and
netsurf <http://www.netsurf-browser.org/> (the nsgtk_check_homedir
function creates the dot directory with world-readable settings) have
a similar issue, but are from different code bases. I think those
should get distinct CVEs, too.
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
