oss-sec mailing list archives
CVE-2009-3297 clarification needed - samba/fuse/ncpfs symlinks
From: "Steven M. Christey" <coley () linus mitre org>
Date: Thu, 4 Feb 2010 12:00:24 -0500 (EST)
Regarding these bug reports: https://bugzilla.redhat.com/show_bug.cgi?id=532940 https://bugzilla.redhat.com/show_bug.cgi?id=558833 https://bugzilla.samba.org/show_bug.cgi?id=6853It seems that a separate CVE should be assigned for samba, fuse, and ncpfs, since these are all distinct codebases.
Since the Samba bug report says that Debian assigned CVE-2009-3297 to the Samba part, it looks like two new CVEs are needed, one for fuse and one for ncpfs.
Am I missing something here? Thanks, Steve
Current thread:
- CVE-2009-3297 clarification needed - samba/fuse/ncpfs symlinks Steven M. Christey (Feb 04)