Re: CVE request: buffer overflow in unixODBC's SQLDriverConnect()

[Josh Bressers <bressers () redhat com>]

----- Original Message -----
> Hi,
> Please assign CVE id for a possible buffer overflow in unixODBC's
> SQLDriverConnect() function by specifying a large value for SAVEFILE
> parameter in the connection string.
>
> A fix has been committed in the SVN addressing the issue:
> http://unixodbc.svn.sourceforge.net/viewvc/unixodbc/trunk/DriverManager/SQLDriverConnect.c?r1=23&r2=27

Please use CVE-2011-1145.

Thanks.

-- 
    JB