oss-sec mailing list archives

Re: CVE request: fetchmail <= 6.3.10 SSL certificate NUL prefix verification bypass


From: Tomas Hoger <thoger () redhat com>
Date: Wed, 5 Aug 2009 22:01:10 +0200

On Wed, 5 Aug 2009 14:13:04 -0400 (EDT) "Steven M. Christey"
<coley () linus mitre org> wrote:

So use CVE-2009-2666 for fetchmail (I'll fill it in later) and Tomas,
even if it results in dozens of CVEs, I suspect this is how we should
go.

Fair enough, thank you!

-- 
Tomas Hoger / Red Hat Security Response Team


Current thread: