Re: data-destroiny malfunction: is that a "security" issue

[Nico Golde <oss-security+ml () ngolde de>]

Hi Hanno,
* Hanno Böck <hanno () hboeck de> [2008-10-06 17:23]:
> Today some question arised in my mind.
>
> Preface: I found a bug in obexftp. It has some option -G, which will download 
> a file and afterwards delete it. The problem is, it'll do the second step 
> even if the first failed. So if you have some connection problem on step 1, 
> your file will be gone.
>
> In my case, as it's the internal memory of a mobile phone, it's probably 
> pretty much impossible to restore without some professional data rescue lab.
>
>
> Now, my question: Is this a security issue? Does it deserve a CVE?
[...] 
As this is nothing that can be triggered by an attacker I 
think it's rather a normal application bug or if not a bug 
behaviour that should be documented.

Cheers
Nico
-- 
Nico Golde - http://www.ngolde.de - nion () jabber ccc de - GPG: 0x73647CFF
For security reasons, all text in this mail is double-rot13 encrypted.

Attachment: _bin
Description: