[Secure-testing-commits] r1636 - data/CAN

[Joey Hess]

Author: joeyh
Date: 2005-08-24 18:44:53 +0000 (Wed, 24 Aug 2005)
New Revision: 1636

Modified:
   data/CAN/list
Log:
some bug updates


Modified: data/CAN/list
===================================================================
--- data/CAN/list	2005-08-24 16:18:44 UTC (rev 1635)
+++ data/CAN/list	2005-08-24 18:44:53 UTC (rev 1636)
@@ -27,8 +27,7 @@
 CAN-2005-2642 (Buffer overflow in the mutt_decode_xbit function in Handler.c for Mutt ...)
 	- mutt (unfixed; bug #323956; high)
 CAN-2005-2641 (Unknown vulnerability in pam_ldap before 180 does not properly handle ...)
-	TODO: check
-	NOTE: detail url 404ed
+	- libpam-ldap (unfixed; bug #324899; unknown)
 CAN-2004-2483 (Kerio WinRoute Firewall before 6.0.9 uses information from PTR queries ...)
 	NOTE: not-for-us (Kerio WinRoute Firewall)
 CAN-2004-2482 (Microsoft Outlook 2000 and 2003, when configured to use Microsoft Word ...)
@@ -1460,7 +1459,7 @@
 CAN-2004-2240 (Multiple SQL injection vulnerabilities in Phorum 5.0.11 and earlier ...)
 	NOTE: not-for-us (Phorum)
 CAN-2004-2239 (Buffer overflow in vsybase.c in vpopmail 5.4.2 and earlier might allow ...)
-	- vpopmail (unfixed; bug filed; low)
+	- vpopmail (unfixed; bug #320608; low)
 CAN-2005-XXXX [SQL injecton vulnerabilities in vpopmail prior to 5.4.6]
 	NOTE: see http://archives.neohapsis.com/archives/bugtraq/2004-08/0286.html
 	NOTE: maintainer says does not apply to debian, see #320608