oss-sec mailing list archives

Re: CVE duplicates SA-CONTRIB-2013-075

From: Forest Monsen <forest.monsen () gmail com>
Date: Fri, 18 Oct 2013 14:16:31 -0700

On Sat, Oct 5, 2013 at 4:10 AM, Henri Salo <henri () nerv fi> wrote:

Advisory https://drupal.org/node/2087055 says:

CVE-2013-4381 (XSS)
CVE-2013-4382 (CSRF)

Are these duplicate CVEs with CVEs below or is there something I am
missing?


Henri, it certainly looks like these are duplicates. However, Kurt
facilitated CVE assignment in
http://www.openwall.com/lists/oss-security/2013/09/27/6 , so it's not clear
to me how the NVD catalogued different identifiers.

Best,
Forest

Current thread:

CVE duplicates SA-CONTRIB-2013-075 Henri Salo (Oct 05)
- Re: CVE duplicates SA-CONTRIB-2013-075 Forest Monsen (Oct 18)
  - Re: CVE duplicates SA-CONTRIB-2013-075 Henri Salo (Oct 21)
    - RE: Re: CVE duplicates SA-CONTRIB-2013-075 Christey, Steven M. (Oct 21)
    - Re: Re: CVE duplicates SA-CONTRIB-2013-075 Kurt Seifried (Oct 21)
    - Re: Re: CVE duplicates SA-CONTRIB-2013-075 Forest Monsen (Oct 22)