[Secure-testing-commits] r3002 - data/CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2005-12-11 16:39:08 +0000 (Sun, 11 Dec 2005)
New Revision: 3002

Modified:
   data/CVE/list
Log:
remove old provisional ethereal entry
CVE-2005-3313 was introduced as a new security bug in .13, so it's
not yet fixed


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2005-12-11 16:34:36 UTC (rev 3001)
+++ data/CVE/list	2005-12-11 16:39:08 UTC (rev 3002)
@@ -2369,7 +2369,7 @@
 CVE-2005-3314 (Stack-based buffer overflow in the IMAP deamon in Novell Netmail 3.5.2 ...)
 	NOT-FOR-US: Novell Netmail
 CVE-2005-3313 (The IRC protocol dissector in Ethereal 0.10.13 allows remote attackers ...)
-	- ethereal 0.10.13-1 (bug #334880; medium)
+	- ethereal <unfixed> (medium)
 CVE-2005-3312 (The HTML rendering engine in Microsoft Internet Explorer 6.0 allows ...)
 	NOT-FOR-US: Microsoft
 CVE-2005-3311 (BMC Software Control-M 6.1.03 for Solaris, and possibly other ...)
@@ -2630,8 +2630,6 @@
 	- squid <not-affected> (bug #334882; medium)
 	NOTE: Bug was introduced in a patch to squid-2.5.STABLE10,
 	NOTE: this patch was never applied to the Debian package.
-CVE-2005-XXXX [Lots of vulnerabilities in ethereal]
-	- ethereal 0.10.13-1 (bug #334880; medium)
 CVE-2005-XXXX [libmad: Assertion failed; buffer overflow]
 	- libmad <unfixed> (bug #287519; low)
 	- mad <removed>