Re: [oss-security] CVE request: multiple status.net issues

----- Original Message -----
> Hello,
>
> I wanted to get some CVEs assigned for some minor issues that I
> reported to
> status.net.
>
> syslog message spoofing via newline injections into logging
> http://status.net/open-source/issues/2795

Use CVE-2010-4658.

>
> limited XSS in error message contents
> http://status.net/open-source/issues/2796 (fixed)

Use CVE-2010-4659.

>
> unsafe use of addslashes for SQL string escapes
> http://status.net/open-source/issues/2797 (fixed)
>

Use CVE-2010-4660.

Thanks.

-- JB

• This message: [ Message body ]
• Next message: Ronald van den Blink: "[oss-security] Batavi 1.0 - XSRF bug fixed"
• Previous message: Kees Cook: "Re: [oss-security] CVE request: libxml2 heap contents leak"
• In reply to: Kees Cook: "[oss-security] CVE request: multiple status.net issues"

• Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ]