oss-sec mailing list archives

Re: CVE-request: ~/.t_coffee/ is world-writable

From: cve-assign () mitre org
Date: Wed, 23 Dec 2015 10:25:53 -0500 (EST)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Can you assign CVE identifier for t-coffee issue where it creates ~/.t_coffee/
as world-writable directory.

Reported in:
  https://bugs.debian.org/751579

  55    4 drwxrwxrwx   6 jwilk    jwilk        4096 Jun 14 11:34 .t_coffee/

 730    4 drwxrwxrwx   2 jwilk    jwilk        4096 Jun 14 11:34 .t_coffee/methods


Use CVE-2015-8621.

- -- 
CVE assignment team, MITRE CVE Numbering Authority
M/S M300
202 Burlington Road, Bedford, MA 01730 USA
[ PGP key available through http://cve.mitre.org/cve/request_id.html ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=n2gl
-----END PGP SIGNATURE-----

Current thread:

CVE-request: ~/.t_coffee/ is world-writable Henri Salo (Dec 23)
- Re: CVE-request: ~/.t_coffee/ is world-writable cve-assign (Dec 23)