oss-sec mailing list archives

Re: CVE Request - Asterisk (AST-2009-008.html)

From: Moritz Muehlenhoff <jmm () inutil org>
Date: Sat, 7 Nov 2009 18:08:55 +0100

Jan Lieskovsky wrote:

The second issue (b,) already got an CVE id of CVE-2008-7220.

b, Cross-site AJAX request vulnerability (CVE-2008-7220)
   http://downloads.asterisk.org/pub/security/AST-2009-009.html


This seems to be a mistake; CVE-2008-7220 already identifies a prototypejs
issue.

Cheers,
        Moritz

Current thread:

CVE Request - Asterisk (AST-2009-008.html) Jan Lieskovsky (Nov 05)
- Re: CVE Request - Asterisk (AST-2009-008.html) Josh Bressers (Nov 05)
- Re: CVE Request - Asterisk (AST-2009-008.html) Moritz Muehlenhoff (Nov 07)
  - Re: CVE Request - Asterisk (AST-2009-008.html) Alex Legler (Nov 07)