[Secure-testing-commits] r2531 - data/CVE

Joey Hess joeyh at costa.debian.org
Fri Oct 21 16:30:15 UTC 2005


Author: joeyh
Date: 2005-10-21 16:30:10 +0000 (Fri, 21 Oct 2005)
New Revision: 2531

Modified:
   data/CVE/list
Log:
another pavuk hole now fixed


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2005-10-21 11:56:43 UTC (rev 2530)
+++ data/CVE/list	2005-10-21 16:30:10 UTC (rev 2531)
@@ -1,3 +1,6 @@
+CVE-2005-XXXX [Pavuk Digest Authentication Buffer Overflow]
+	- pavuk 0.9.33-1 (bug #264684; high)
+	NOTE: second hole mentioned in bug report
 CVE-2005-XXXX [HTTP Request smuggling in pound]
 	- pound 1.9.4-1
 CVE-2005-3276 (The sys_get_thread_area function in process.c in Linux 2.6 before ...)




More information about the Secure-testing-commits mailing list