oss-sec mailing list archives

Re: CVE Request: programming error in crypt(3)


From: Xin Li <delphij () delphij net>
Date: Thu, 26 Apr 2012 17:24:45 -0700

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 04/26/12 17:20, Kurt Seifried wrote:
CVE-2012-2143On 04/26/2012 03:36 PM, Xin Li wrote:
Hi,

I'd like to request a CVE number for a programming error in 
FreeBSD's crypt(3) implementation, which prevents it from 
generating a right hash from input in certain circumstances.

We will publish the details in an upcoming advisory.

Thanks in advance!

Cheers,

Please use CVE-2012-2143 for this issue.

Thanks!

- -- 
Xin LI <delphij () delphij net> https://www.delphij.net/
FreeBSD - The Power to Serve!           Live free or die
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.19 (FreeBSD)

iQEcBAEBCAAGBQJPmedNAAoJEG80Jeu8UPuzJpYIAI9hcIFMuASc8St5gxGt2uge
5cjxIjYWnqEX+F29AVhub7nLusiQbJP2kUNpt0bAj7zXG6PFSzl1x9qPhba4K9lz
3NZ3Xn9q+qX4ALHjzpKaHZRE7dv1thXFgVQX/OhOVcMv8OZ0DMajfBS4+sjsZdJR
TsspRfHV1qoq+8YoFYNGUxm77mwE5qs9KGFfSlNkKWwtLjdfn4tDA8nKyXjvhE1K
O/iX4+yFBPAqPS2lHxwMeBRvUCRtteMnpbYf0Sfg16qhP7vPeJiXVtYy1yNoHPJd
pRDOw3Q0RD7qGmBww4ZgmssO6/RGfxk0YeJY5xTUb0bdfvz8QJBrcwmRui9ef7E=
=lw1m
-----END PGP SIGNATURE-----


Current thread: