CVE Request -- Eggdrop

[Jan Lieskovsky <jlieskov () redhat com>]

Hello Steve,

  Thomas Sader yesterday reported, the original patch for original
stack-based buffer overflow flaw (CVE-2007-2807) in Eggdrop is
incomplete (might introduce another flaw). 

References:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=528778
http://www.gossamer-threads.com/lists/fulldisc/full-disclosure/68341 
(affected versions, vulnerability details, PoC, resolution).
http://www.eggheads.org/downloads/ (upstream page)
http://www.eggheads.org/redirect.php?url=ftp://ftp.eggheads.org/pub/eggdrop/patches/official/1.6/eggdrop1.6.19%2Bctcpfix.patch.gz
(patch towards the latest version).

Could you allocate a new CVE id for it?

Thanks, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Response Team