Re: CVE request: icecast: possible leak of on-connect scripts

[cve-assign () mitre org]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> I think this icecast2 issue should also receive a CVE ID:
> https://trac.xiph.org/changeset/19137/

> UID and GID were changed, supplementary groups were left in place.

Use CVE-2014-9091.

- -- 
CVE assignment team, MITRE CVE Numbering Authority
M/S M300
202 Burlington Road, Bedford, MA 01730 USA
[ PGP key available through http://cve.mitre.org/cve/request_id.html ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (SunOS)

iQEcBAEBAgAGBQJUdYIDAAoJEKllVAevmvmsC/MH/2bPkBub0Um+UZSla/T0vSB+
fD/5NleDQKP2Hc46QdpD0R8IO1ueTm2hW1U9iAUAUTxhjc86MAuB3qdJ/a87kSbS
Z3hdHo3qEKBzSCKEyPpS3UdDe/F6TbtthoWnbzGTUVXPu7sqmTwQMvwnJQ+AHGUV
vPxfCUn7WPitBSgEak6lVltZzEW7nraidE+dFUEvLfKDvpDil2tH78QV56Gtu/Cz
Kxm8J+Awn3Ep+YfP6TdExGDCFNjF9Bos9ozFxQ2f1aI36zOlWbXuzLgwSOgCOhsa
vzaMBkDAPEqDIjA+k7zQ1riOpBBa7X4LEncHDQmgwtvbBLCwl/lw2Ih7jJbyD0c=
=EQrU
-----END PGP SIGNATURE-----