Re: CVE requests: opie off by one and setuid() failure

[Josh Bressers <bressers () redhat com>]

----- Original Message -----
> Hi,
>
> Can someone assign 2 CVE's for a off by one in opiesu
> and a missing setuid() retval check in opielogin which
> leads to easy root compromise? Reviewed opie-2.4.
>
> Patches are available here:
>
> https://bugzilla.novell.com/show_bug.cgi?id=698772

Here you go:

CVE-2011-2489 opiesu Off by one
CVE-2011-2490 opiesu missing setuid() check

Thanks.

-- 
    JB