oss-sec mailing list archives
Re: CVE requests: opie off by one and setuid() failure
From: Josh Bressers <bressers () redhat com>
Date: Thu, 23 Jun 2011 15:49:35 -0400 (EDT)
----- Original Message -----
Hi, Can someone assign 2 CVE's for a off by one in opiesu and a missing setuid() retval check in opielogin which leads to easy root compromise? Reviewed opie-2.4. Patches are available here: https://bugzilla.novell.com/show_bug.cgi?id=698772
Here you go: CVE-2011-2489 opiesu Off by one CVE-2011-2490 opiesu missing setuid() check Thanks. -- JB
Current thread:
- CVE requests: opie off by one and setuid() failure Sebastian Krahmer (Jun 22)
- Re: CVE requests: opie off by one and setuid() failure Vasiliy Kulikov (Jun 22)
- Re: CVE requests: opie off by one and setuid() failure Josh Bressers (Jun 23)