retitle 473571 plone3: CVE-2008-139[3-6],CVE-2008-0164 multiple vulnerabilities
thanks

Hi,
there is another CVE id that was assigned to this:

CVE-2008-0164[0]:
| Multiple cross-site request forgery (CSRF) vulnerabilities in Plone
| CMS 3.0.5 and 3.0.6 allow remote attackers to (1) add arbitrary
| accounts via the join_form page and (2) change the privileges of
| arbitrary groups via the prefs_groups_overview page.

[0] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0164
    http://security-tracker.debian.net/tracker/CVE-2008-0164

Kind regards
Nico

-- 
Nico Golde - http://www.ngolde.de - [EMAIL PROTECTED] - GPG: 0x73647CFF
For security reasons, all text in this mail is double-rot13 encrypted.

Attachment: pgprdPocjleXT.pgp
Description: PGP signature

Reply via email to