oss-sec mailing list archives
CVE Request -- Eggdrop
From: Jan Lieskovsky <jlieskov () redhat com>
Date: Fri, 15 May 2009 18:44:31 +0200
Hello Steve, Thomas Sader yesterday reported, the original patch for original stack-based buffer overflow flaw (CVE-2007-2807) in Eggdrop is incomplete (might introduce another flaw). References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=528778 http://www.gossamer-threads.com/lists/fulldisc/full-disclosure/68341 (affected versions, vulnerability details, PoC, resolution). http://www.eggheads.org/downloads/ (upstream page) http://www.eggheads.org/redirect.php?url=ftp://ftp.eggheads.org/pub/eggdrop/patches/official/1.6/eggdrop1.6.19%2Bctcpfix.patch.gz (patch towards the latest version). Could you allocate a new CVE id for it? Thanks, Jan. -- Jan iankko Lieskovsky / Red Hat Security Response Team
Current thread:
- CVE Request -- Eggdrop Jan Lieskovsky (May 15)
- Re: CVE Request -- Eggdrop Steven M. Christey (May 29)