Re: CVE id request: libc fortify source information disclosure

[Josh Bressers <bressers () redhat com>]

----- "Nico Golde" <oss-security+ml () ngolde de> wrote:

> Hi,
> http://seclists.org/fulldisclosure/2010/Apr/399
> did this ever get a CVE id? As this also works for setuid programs it
> would be 
> nice to get one assigned and have this patched.

Steve,

What is MITRE policy on this one. By itself I question if this is a
security flaw, but it also would appear to have the potential to turn a DoS
into something worse.

I'm not sure what policy is in this instance.

Thanks.

-- 
    JB