oss-security - CVE request -- vCalendar plugin for Claws Mail: credentials exposed on interface

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20121115123613.GH28468@trasgu>
Date: Thu, 15 Nov 2012 13:36:13 +0100
From: Ricardo Mones <ricardo@...es.org>
To: Open Source Security Mailing List <oss-security@...ts.openwall.com>
Subject: CVE request -- vCalendar plugin for Claws Mail: credentials exposed
 on interface

  Hi,

  This has been reported on our bugzilla:
  http://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=2782

  There's still not fix available. Could a CVE id be allocated for this if
appropriate?

  thanks in advance,

P.S.: I'm not subscribed to the list.
-- 
  Ricardo Mones 
  ~
  Physics is like sex: sure, it may give some practical results, but 
  that's not why we do it.                            Richard Feynman


Download attachment "signature.asc" of type "application/pgp-signature" (199 bytes)

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.