Re: CVE request: XSS in PNP4Nagios

[cve-assign () mitre org]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> I noticed that on Red Hat's Bugzilla these two are aliased to
> CVE-2014-4740. Should thus CVE-2014-4740 be rejected, or is
> CVE-204-4740 used for something different?

> https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-4740 i.e.
> https://bugzilla.redhat.com/show_bug.cgi?id=1115983 .

We need to REJECT CVE-2014-4740 because of the multiple conflicting
uses.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-4740 says
that CVE-2014-4740 is only about
f846a6c9d007ca2bee05359af747619151195fc9. The correct CVE ID for
f846a6c9d007ca2bee05359af747619151195fc9 is CVE-2014-4907.

However, https://bugzilla.redhat.com/show_bug.cgi?id=1115983 says that
CVE-2014-4740 is only about e4a19768a5c5e5b1276caf3dd5bb721a540ec014
and cb925073edeeb97eb4ce61a86cdafccc9b87f9bb. The correct CVE ID for
those two is CVE-2014-4908.

- -- 
CVE assignment team, MITRE CVE Numbering Authority
M/S M300
202 Burlington Road, Bedford, MA 01730 USA
[ PGP key available through http://cve.mitre.org/cve/request_id.html ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (SunOS)

iQEcBAEBAgAGBQJTv6KzAAoJEKllVAevmvmsQhsIAJbbGeIR6ym+m7CaNTJT0J4T
1pYnvPXkTXn6C7g7Dn1vCZqWISry6XAamP3OTIk8iXEkY+hJkQUKf6FiAsBP3uST
RjKy9Gs96hXxKtC4Ym5O+DcXyhWQYrOBqmfsidYGY8dH3L4aHFUAlGAAGNsJrIQp
bwc7VEfCqnRLhC4tyQ0YYBQKWOPO7BKKBBn0gQD/gJ2h98efknGYeEhNoVaAzzA/
jqBuh7ob2b4MwkOJlcpo5zHMd+b10L5R7hSu6VHvr81WY5JcQ4gXFKoXIZcjp6ZH
uda6OZrKE5DScie8e1yQkT+EhDSGcDSqAXpLJdklC0aoH8GDIPe4sdmCwhoRvTU=
=74N8
-----END PGP SIGNATURE-----