Re: CVE id request: gitolite

[Josh Bressers <bressers () redhat com>]

----- Original Message -----
> https://github.com/sitaramc/gitolite/commit/4ce00aef84d1ff7c35f7adbbb99a6241cfda00cc
> http://groups.google.com/group/gitolite/browse_thread/thread/797a93ec26e1dcbc?pli=1
>
> I didn't find a CVE id for this, could I get one?

This appears to be an arbitrary command execution flaw (the patch appears
to limit the commands that can be run).

Use CVE-2011-1572

Thanks.

-- 
    JB