Re: CVE id request: latd

[Ignatios Souvatzis <is () netbsd org>]

On Sun, Feb 03, 2013 at 09:11:13PM -0700, Kurt Seifried wrote:
> On 02/03/2013 04:48 AM, Nico Golde wrote:
> > Hey, latd suffers of a buffer overflow when processing the version
> > header and generating an error message.
> >
> > http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699625
> >
> > Can we get a CVE id for this?
> >
> > Cheers Nico
>
> Please use CVE-2013-0251 for this issue.

All versions from 1.25 to 1.30 contain the bug. I've inspected the 
code to find out whether the pkgsrc package version has it and to
write a proper pkg-vulnerabilities database entry.

Regards,
        -is