oss-sec mailing list archives

Re: Is CVE-2015-4650 a duplicate, leak, or just a typo?


From: Michael McNally <mcnally () isc org>
Date: Fri, 14 Aug 2015 15:09:39 -0800

On 8/12/15 5:42 AM, ISC Security Officer wrote:

Speaking for ISC on the matter, I suspect a typo as well; at any rate
we have no knowledge of a CVE with that number. 

We contacted the administrators of the web page that Florian identified
as the origin of the error and asked them about it.  I include their
response, which confirms that it was an inadvertent typo.

Hi Michael,

Thanks for flagging this for us.  It is indeed a typo.
We've corrected our release notes and security advisory.

https://www.alienvault.com/forums/discussion/5706/

Regards,
Jim

-------------------------------------------------------------------------------------------
Jim Hansen
AlienVault, Inc. | VP, Product Management

If you spot "CVE-2015-4650" (the typo'ed number) in use elsewhere,
please either inform the page owner of the error or inform
security-officer () isc org if you think that people will be significantly
mislead by the error.

Thank you,

Michael McNally
(responding as ISC Security Officer)


Current thread: