Re: CVE Request -- Zabbix v1.8.2 and v.1.6.9

[Tomas Hoger <thoger () redhat com>]

On Fri, 2 Apr 2010 22:28:10 +0200 Moritz Muehlenhoff <jmm () inutil org>
wrote:

> > >    a, Zabbix <= 1.8.1 SQL Injection
> > >
> > >    [1] http://seclists.org/fulldisclosure/2010/Apr/1
> > >    [2] http://www.zabbix.com/rn1.8.2.php
> >
> > Use CVE-2010-1144 for this one
>
> Josh, in a later mail you've assigned the same ID to a libnids issue:

Looks like a wrong id used in libnids mail as, according to notes, the
assignment should be:

CVE-2010-0751 libnids v1.24 -- Null pointer dereference
CVE-2010-1144 Zabbix <= 1.8.1 SQL Injection
CVE-2010-1145 Zabbix remote commands execution in Zabbix Server

-- 
Tomas Hoger / Red Hat Security Response Team