[Secure-testing-commits] r875 - sarge-checks/CAN

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2005-04-20 21:27:02 +0000 (Wed, 20 Apr 2005)
New Revision: 875

Modified:
   sarge-checks/CAN/list
Log:
Fixed heimdal has been released upstream; bug filed.
A bunch of new vulns on egroupware; bug filed.


Modified: sarge-checks/CAN/list
===================================================================
--- sarge-checks/CAN/list	2005-04-20 21:14:19 UTC (rev 874)
+++ sarge-checks/CAN/list	2005-04-20 21:27:02 UTC (rev 875)
@@ -1,3 +1,5 @@
+CAN-2005-XXXX [Multiple security issues in egroupware]
+	- egroupware (unfixed; bug filed)
 CAN-2005-1191 (The Web View DLL (webvw.dll), as used in Windows Explorer on Windows ...)
 	NOTE: not-for-us (Windows)
 CAN-2005-1190 (WebcamXP PRO v2.16.468 and earlier allows remote attackers to cause a ...)
@@ -2327,11 +2329,11 @@
 	{DSA-703-1 DSA-699-1 DSA-697-1}
 	TODO: krb4 contains a BSD derived telnet client as well, check whether it's vulnerable
 	- krb5 1.3.6-2
-	- heimdal (unfixed)
+	- heimdal (unfixed; bug filed)
 CAN-2005-0468 (Heap-based buffer overflow in the env_opt_add function in telnet.c for ...)
 	{DSA-703-1}
 	- krb5 1.3.6-2
-	TODO: check heimdal, krb4, netkit-telnet, netkit-telnet, netkit-telnet-ssl
+	TODO: check krb4, netkit-telnet, netkit-telnet, netkit-telnet-ssl
 CAN-2005-0467 (Multiple integer overflows in the (1) sftp_pkt_getstring and (2) ...)
 	- putty 0.57-1
 CAN-2005-0466