oss-sec mailing list archives

Re: CVE id request: masqmail


From: Josh Bressers <bressers () redhat com>
Date: Fri, 9 Sep 2011 13:27:21 -0400 (EDT)

Please use CVE-2011-3350.

Thanks.

-- 
    JB


----- Original Message -----
Hi,
a misuse of the seteuid function from glibc prevents masqmail from
properly
dropping root privileges.
References:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=638002
http://article.gmane.org/gmane.mail.masqmail/303

Can you assign a CVE id to this?

Kind regards
Nico
--
Nico Golde - http://www.ngolde.de - nion () jabber ccc de - GPG:
0xA0A0AAAA
For security reasons, all text in this mail is double-rot13 encrypted.


Current thread: