[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-Id: <201312300421.rBU4Lh1x023525@linus.mitre.org>
Date: Sun, 29 Dec 2013 23:21:43 -0500 (EST)
From: cve-assign@...re.org
To: henri@...v.fi
Cc: cve-assign@...re.org, oss-security@...ts.openwall.com, jakob@...oblell.com
Subject: Re: CVE request: SMF 1.1.19, 2.0.6
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
> http://www.jakoblell.com/blog/2013/12/13/multiple-vulnerabilities-in-smf-forum-software/
> fix the clickjacking problem (via an X-Frame-Options header)
Use CVE-2013-7234.
> the username faking possibility via multiple consecutive spaces
Use CVE-2013-7235.
> the Unicode homoglyph attack has not yet been fixed
Use CVE-2013-7236.
- --
CVE assignment team, MITRE CVE Numbering Authority
M/S M300
202 Burlington Road, Bedford, MA 01730 USA
[ PGP key available through http://cve.mitre.org/cve/request_id.html ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (SunOS)
iQEcBAEBAgAGBQJSwPRcAAoJEKllVAevmvmsQ1kH/2ZrCB1o551VzG5TAxOAaV3g
dkG3HqHp9Z05jwH1jlaljj7VSC2MLRCItCZzPuKHhMtY5c2xnHcDrvKNz+VPL+7F
82zRpkH5R7VWKMH2IOBwnnObEGMubIX5v19/0U0sbp3C9BO2pe2s7lQ9g+5DyFLI
7VbAy56Qaujvwz+NE9AtSmFXkLeuvXMCVHz01zKnc994wQmxqyhD0H/ZwtvYcDhC
mV2mcpBr2kuaF5nNxveNDZ+t4OVBA6rlqxchGW6dO4ywm/O9som0aVKRQjU2/RZw
7eyl4FItvZwFfgLYdkJotF/G/0II3gajssSR4mmMoN+nvOSQBJDj7+EpWBFVlqA=
=2fsf
-----END PGP SIGNATURE-----
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
