bugtraq - Correcting CVEs (was Re: [Full-disclosure] Cross site scripting issues in s9y (CVE-2008-1386, CVE-2008-1387))

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-Id: <200804221421.35027.hanno@hboeck.de>
Date: Tue, 22 Apr 2008 14:21:34 +0200
From: Hanno Böck <hanno@...eck.de>
To: full-disclosure@...ts.grok.org.uk
Cc: "Steven M. Christey" <coley@...us.mitre.org>,
	bugtraq@...urityfocus.com
Subject: Correcting CVEs (was Re: [Full-disclosure] Cross site scripting issues in s9y (CVE-2008-1386, CVE-2008-1387))

Am Dienstag 22 April 2008 schrieb Hanno Böck:
> Two smaller issues in s9y, published here:
> http://int21.de/cve/CVE-2008-1386-s9y.html
> http://int21.de/cve/CVE-2008-1387-s9y.html

Damn, it was too early in the morning.
The correct CVEs (as listed in the advisory below) are CVE-2008-1385 and 
CVE-2008-1386.
The correct URLs:
http://int21.de/cve/CVE-2008-1385-s9y.html
http://int21.de/cve/CVE-2008-1386-s9y.html

Sorry for any confusion this has caused.

-- 
Hanno Böck		Blog:		http://www.hboeck.de/
GPG: 3DBD3B20		Jabber/Mail:	hanno@...eck.de

Download attachment "signature.asc " of type "application/pgp-signature" (198 bytes)