[Secure-testing-commits] r603 - sarge-checks/CAN

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2005-03-22 01:04:52 +0100 (Tue, 22 Mar 2005)
New Revision: 603

Modified:
   sarge-checks/CAN/list
Log:
Kernel ISO9660/RockRidge DoS flaws.


Modified: sarge-checks/CAN/list
===================================================================
--- sarge-checks/CAN/list	2005-03-21 20:37:37 UTC (rev 602)
+++ sarge-checks/CAN/list	2005-03-22 00:04:52 UTC (rev 603)
@@ -19,7 +19,8 @@
 CAN-2005-0816 (Buffer overflow in newgrp in Solaris 7 through 9 allows local users to ...)
 	NOTE: not-for-us (Solaris)
 CAN-2005-0815 (Multiple "range checking flaws" in the ISO9660 filesystem handler in ...)
-	TODO: check
+	- kernel-source-2.6.8 (unfixed; bug #300783)
+	NOTE: Seems to affect 2.4 as well, needs clarification
 CAN-2005-0814 (Unknown vulnerability in lshd in Lysator LSH 1.x and 2.x before 2.0.1 ...)
 	TODO: check
 CAN-2005-0813 (Buffer overflow in Initial Redirect (ir) Squid Proxy Plug-In 0.1 and ...)