CVE Request for cacti

[Henri Salo <henri () nerv fi>]

I would like to obtain CVE identifier for security bug[1] in cacti[2].
I beleive this version of cacti is still used in some servers[3][4].

1: http://bugs.cacti.net/view.php?id=1245
2: http://cacti.net/
3: http://packages.debian.org/oldstable/cacti
4:
http://qa.debian.org/popcon-graph.php?packages=cacti&show_installed=on&from_date=2007-04-08&to_date=2009-02-14&hlght_date=&date_fmt=%25Y-%25m&beenhere=1

Dates 2007-04-08 and 2009-02-14 are from
http://www.debian.org/News/2007/20070408 and
http://www.debian.org/News/2009/20090214

How do I proceed with this issue to get a valid CVE identifier?

---
Henri Salo