[Secure-testing-commits] r713 - sarge-checks/CAN

Moritz Muehlenhoff jmm-guest@costa.debian.org
Fri, 01 Apr 2005 11:15:06 +0000


Author: jmm-guest
Date: 2005-04-01 11:15:03 +0000 (Fri, 01 Apr 2005)
New Revision: 713

Modified:
   sarge-checks/CAN/list
Log:
telnet/heimdal is vulnerable.


Modified: sarge-checks/CAN/list
===================================================================
--- sarge-checks/CAN/list	2005-04-01 07:22:46 UTC (rev 712)
+++ sarge-checks/CAN/list	2005-04-01 11:15:03 UTC (rev 713)
@@ -1736,9 +1736,9 @@
 	- wpasupplicant 0.3.8-1
 CAN-2005-0469 (Buffer overflow in the slc_add_reply function in various BSD-based ...)
 	{DSA-699-1 DSA-697-1}
-	TODO: heimdal contains a BSD derived telnet client as well, check whether it's vulnerable
 	TODO: krb4 contains a BSD derived telnet client as well, check whether it's vulnerable
 	- krb5 (unfixed)
+	- heimdal (unfixed)
 CAN-2005-0468 (Heap-based buffer overflow in the env_opt_add function in telnet.c for ...)
 	- krb5 (unfixed)
 	TODO: check heimdal, krb4, netkit-telnet, netkit-telnet, netkit-telnet-ssl