[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <1354059765.7676.18.camel@scapa>
Date: Wed, 28 Nov 2012 00:42:45 +0100
From: Yves-Alexis Perez <corsac@...ian.org>
To: oss-security@...ts.openwall.com
Cc: secure-testing-team@...ts.alioth.debian.org, Russ Allbery
<rra@...ian.org>, code@...zashack.org, temp66@...il.com
Subject: Re: rssh: incorrect filtering of command line options
On mer., 2012-11-28 at 00:21 +0100, Yves-Alexis Perez wrote:
> CVE-2012-2251
> Incorrect filtering of the "--rsh" option: the filter preventing usage of the
> "--rsh=" option would not prevent passing "--rsh". This vulnerability affects
> upstream code.
>
This is indeed CVE-2012-2252, sorry for that.
Regards,
--
Yves-Alexis Perez
Debian Security
Download attachment "signature.asc" of type "application/pgp-signature" (491 bytes)
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
