[Secure-testing-commits] r958 - sarge-checks/CAN

Moritz Muehlenhoff jmm-guest@costa.debian.org
Mon, 02 May 2005 07:31:39 +0000


Author: jmm-guest
Date: 2005-05-02 07:31:35 +0000 (Mon, 02 May 2005)
New Revision: 958

Modified:
   sarge-checks/CAN/list
Log:
Insecure mailbox generation in shadow's useradd.


Modified: sarge-checks/CAN/list
===================================================================
--- sarge-checks/CAN/list	2005-05-02 06:49:56 UTC (rev 957)
+++ sarge-checks/CAN/list	2005-05-02 07:31:35 UTC (rev 958)
@@ -1,3 +1,5 @@
+CAN-2005-XXXX [Insecure mailbox generation in passwd's useradd
+	- shadow (unfixed; bug #307259)
 CAN-2005-XXXX [Insecure tempfile generation in shadow's vipw] 
 	- shadow (unfixed; bug #242407)
 CAN-2005-1364 (Multiple SQL injection vulnerabilities in MetaBid Auctions allow ...)