oss-sec mailing list archives

cryptocat/decryptocat - needs a cve?

From: Kurt Seifried <kseifried () redhat com>
Date: Mon, 08 Jul 2013 21:32:20 -0600

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Original posting:
http://tobtu.com/decryptocat.php

Official blog reply:
https://blog.crypto.cat/2013/07/new-critical-vulnerability-in-cryptocat-details/

Reddit:
http://www.reddit.com/r/netsec/comments/1hmn2g/decryptocat/

Has a CVE for this been requested/assigned?

- -- 
Kurt Seifried Red Hat Security Response Team (SRT)
PGP: 0x5E267993 A90B F995 7350 148F 66BF 7554 160D 4553 5E26 7993
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)

iQIcBAEBAgAGBQJR24REAAoJEBYNRVNeJnmTSw8P/2ytCxdSgOsnr7s54foKqG5Q
rsCcXYTh3rE+HQXXtsbWfaqjbA98A04Rd8AEtiLx13w/kPN7G/00cmxGjfrD1xdK
sFA+Cl0RPT07cY8LdOYhXrLQSbsQNzMhpiA4FQZbgvHZFgMZu0GxNfN1hmjJo1HK
bnyPzn4X1m1JK8iDT4ksCgr7xk4CpCDvBnQC7BeX8G/IO6kpPXwIfLIn/BKIZ6Fg
ZbUR6gENcvo0X1hLN2of58rvZB/GxMlwnKp9CzpOdC9dwXTvuKg94O6CBxFz5CP3
rAP7Oe06xCQsr7lrd/wc6ckbbXKizLNUCl0vjn7nZeBye2cthFKOFDV2lo6qHZBw
tNfkeqpkfvqvagKzTpVqxzMyFnmPH1hidSRJlTOGhnI1ukqqpMJZo1GfaKqIBLAZ
p/2+wzsdl3YIfMjaNxPHzgzf8Fj3bSU95tiAnKoyak7Xz7kwaRZ9sZlEoYgQCqsm
hErus4PvjfIjFX8tq+gAyQyaCAQtlm36vpW+LCD4fsS2NH3KRZHrMTa/izGUxXCk
SSNA5AveYhsKO2CHs5a56pybDGPlDlpmGMEgvydsmO/CA16TnBeS9qoDkK+MkXeg
mlE/A3CwjWhhQMqVDHVX38/Z6CLNCWNRLxBc6970+bRrJoUibJeOEuCJYfVRfDD8
toRgOpk/vjolcWVW9Zzz
=K4Ov
-----END PGP SIGNATURE-----

Current thread:

cryptocat/decryptocat - needs a cve? Kurt Seifried (Jul 08)
- Re: cryptocat/decryptocat - needs a cve? Nadim Kobeissi (Jul 09)
  - Re: Re: cryptocat/decryptocat - needs a cve? Kurt Seifried (Jul 09)
    - Re: cryptocat/decryptocat - needs a cve? Nadim Kobeissi (Jul 10)
- <Possible follow-ups>
- Re: Re: Re: cryptocat/decryptocat - needs a cve? security curmudgeon (Jul 10)
  - Re: Re: Re: Re: cryptocat/decryptocat - needs a cve? Kurt Seifried (Jul 10)