[tahoe-lafs-trac-stream] [tahoe-lafs] #1528: escalation of authority from knowing a storage index to being able to delete corresponding shares

tahoe-lafs trac at tahoe-lafs.org
Fri Jan 13 17:50:21 UTC 2012


#1528: escalation of authority from knowing a storage index to being able to
delete corresponding shares
-------------------------+-------------------------------------------------
     Reporter:  zooko    |      Owner:  davidsarah
         Type:  defect   |     Status:  closed
     Priority:           |  Milestone:  1.8.3
  critical               |    Version:  1.9.0a1
    Component:  code-    |   Keywords:  security preservation anti-
  storage                |  censorship storage leases
   Resolution:  fixed    |
Launchpad Bug:  848476   |
-------------------------+-------------------------------------------------

Comment (by zooko):

 According to [http://openwall.com/lists/oss-security/2011/10/10/10 this
 post] by Josh Bressers from !RedHat on the oss-sec mailing list, we should
 use the identifier {{{CVE-2011-3617}}} for this bug.

-- 
Ticket URL: <https://tahoe-lafs.org/trac/tahoe-lafs/ticket/1528#comment:15>
tahoe-lafs <https://tahoe-lafs.org>
secure decentralized storage


More information about the tahoe-lafs-trac-stream mailing list