[Secure-testing-commits] r447 - sarge-checks/CAN
Micah Anderson
micah@costa.debian.org
Sat, 19 Feb 2005 02:21:42 +0100
Author: micah
Date: 2005-02-19 02:21:40 +0100 (Sat, 19 Feb 2005)
New Revision: 447
Modified:
sarge-checks/CAN/list
Log:
grabbed some kernel ones
Modified: sarge-checks/CAN/list
===================================================================
--- sarge-checks/CAN/list 2005-02-19 00:33:31 UTC (rev 446)
+++ sarge-checks/CAN/list 2005-02-19 01:21:40 UTC (rev 447)
@@ -879,13 +879,13 @@
- kernel-source-2.6.10 2.6.10-4
CAN-2005-0178 (Race condition in the setsid function in Linux before 2.6.8.1 has ...)
NOTE: see USN-82-1
- TODO: check with kernel team
+ NOTE: micah checking with kernel team
CAN-2005-0177 (nls_ascii.c in Linux before 2.6.8.1 uses an incorrect table size, ...)
NOTE: see USN-82-1
- TODO: check with kernel team
+ NOTE: micah checking with kernel team
CAN-2005-0176 (The shmctl function in Linux before 2.6.8.1 allows local users to ...)
NOTE: see USN-82-1
- TODO: check with kernel team
+ NOTE: micah checking with kernel team
CAN-2004-1392 (PHP 4.0 with cURL functions allows remote attackers to bypass the ...)
- php4 4:4.3.10-3
CAN-2004-1391 (Untrusted execution path vulnerability in the PPPoE daemon (PPPoEd) in ...)
@@ -1419,7 +1419,7 @@
NOTE: Fixed in upstream 2.6.10
- kernel-source-2.6.8 2.6.8-11
- kernel-source-2.6.9 2.6.9-4
- TODO: what about 2.4? check with kernel team
+ NOTE: micah checking with kernel team, what about 2.4?
CAN-2004-1332 (Stack-based buffer overflow in the FTP daemon in HP-UX 11.11i, with ...)
NOTE: not-for-us (hpux)
CAN-2004-1331 (The execCommand method in Microsoft Internet Explorer 6.0 SP2 allows ...)