Re: CVE request: zope-ldapuser

[Josh Bressers <bressers () redhat com>]

----- "Sébastien Delafond" <seb () debian org> wrote:

> Hi,
>
> there is an authentication probleme in zope-ldapuser, where any
> password
> is accepted when attempting to log in as the emergency user (as
> defined
> in zpasswd.py). See Debian bug 593466[0] for the corresponding patch.
>
>
> [0] http://bugs.debian.org/593466

The debian bug has lots more info.

Please use CVE-2010-2944

Thanks.

-- 
    JB