On Mon, 20 Aug 2018, Daniel Stenberg via curl-library wrote:

> 3. There's but one curl vulnerability that still doesn't have a valid CVE. I
> cheated a bit and called it CVE-2003-XXXX for now:
> https://curl.haxx.se/docs/CVE-2003-XXXX.html
>
> I have applied for an official ID for this, but I'm not sure how they treat
> requests for IDs for 15 year old issues. If I get an ID, I'll update
> accordingly - otherwise I'll leave it like this.

That was easy. It is hereby known as CVE-2003-1605!

-- 
  / daniel.haxx.se
-------------------------------------------------------------------
Unsubscribe: https://cool.haxx.se/list/listinfo/curl-library
Etiquette:   https://curl.haxx.se/mail/etiquette.html