PDA

Bekijk Volledige Versie : Correcting CVEs (was Re: [Full-disclosure] Cross site scripting issues in s9y (CVE-2008-1386, CVE-2008-1387))



Hanno =?utf-8?q?B=C3=B6ck?=
22/04/08, 18:55
--nextPart4186043.3xo4kE2eXr
Content-Type: text/plain;
charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

Am Dienstag 22 April 2008 schrieb Hanno B=C3=B6ck:
> Two smaller issues in s9y, published here:
> http://int21.de/cve/CVE-2008-1386-s9y.html
> http://int21.de/cve/CVE-2008-1387-s9y.html

Damn, it was too early in the morning.
The correct CVEs (as listed in the advisory below) are CVE-2008-1385 and=20
CVE-2008-1386.
The correct URLs:
http://int21.de/cve/CVE-2008-1385-s9y.html
http://int21.de/cve/CVE-2008-1386-s9y.html

Sorry for any confusion this has caused.

=2D-=20
Hanno B=C3=B6ck Blog: http://www.hboeck.de/
GPG: 3DBD3B20 Jabber/Mail: hanno@hboeck.de

--nextPart4186043.3xo4kE2eXr
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (GNU/Linux)

iEYEABECAAYFAkgN2E8ACgkQr2QksT29OyCXdgCfU4YrSideWK QbOJJsFrQka+Eu
rvUAn25ANWUztHxmzyvUgwyWJ1bt18Du
=XIvj
-----END PGP SIGNATURE-----

--nextPart4186043.3xo4kE2eXr--