pure-ftpd STARTTLS command injection / new CVE?

[Sebastian Krahmer <krahmer () suse de>]

Hi,

http://www.pureftpd.org/project/pure-ftpd/news

states that pure-ftpd is affected by the same STARTTLS
injection bug as postifx's CVE-2011-0411.

Is this CVE postfix-specific or can it be used for
pure-ftpd as well? If needed, can someone assign a new CVE?

thx,
Sebastian

-- 
~
~ perl self.pl
~ $_='print"\$_=\47$_\47;eval"';eval
~ krahmer () suse de - SuSE Security Team
~ SUSE LINUX Products GmbH, GF: Markus Rex, HRB 16746 (AG Nuernberg)