Author: white
Date: 2008-12-22 20:23:50 +0000 (Mon, 22 Dec 2008)
New Revision: 10778
Modified:
data/CVE/list
Log:
muttprint/ppp temp file issues, one non-issue
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2008-12-22 17:20:46 UTC (rev 10777)
+++ data/CVE/list 2008-12-22 20:23:50 UTC (rev 10778)
@@ -756,11 +756,13 @@
NOTE: script if it is used to debug with strace and a missing check for
mkstemp failing
NOTE: but these situations are really corner cases
CVE-2008-5368 (muttprint in muttprint 0.72d allows local users to overwrite
arbitrary ...)
- TODO: check
+ - muttprint <unfixed> (low; bug #509487)
+ [etch] - muttprint <no-dsa> (Minor issue)
CVE-2008-5367 (ip-up in ppp-udeb 2.4.4rel on Debian GNU/Linux allows local
users to ...)
- TODO: check
+ - ppp <unfixed> (unimportant)
+ NOTE: insecure temp file handling in udeb is not an issue, since it is
during the installation
CVE-2008-5366 (The postinst script in ppp 2.4.4rel on Debian GNU/Linux allows
local ...)
- TODO: check
+ - ppp <unfixed> (low; bug #509488)
CVE-2008-5365 (SQL injection vulnerability in VoteHistory.asp in
ActiveWebSoftwares ...)
NOT-FOR-US: ActiveWebSoftwares
CVE-2008-5364 (Stack-based buffer overflow in the getPlus ActiveX control in
gp.ocx ...)
_______________________________________________
Secure-testing-commits mailing list
[email protected]
http://lists.alioth.debian.org/mailman/listinfo/secure-testing-commits
