[Secure-testing-commits] r3435 - data/CVE

[Florian Weimer]

Author: fw
Date: 2006-02-06 20:16:19 +0000 (Mon, 06 Feb 2006)
New Revision: 3435

Modified:
   data/CVE/list
Log:
CVE-2005-3632, CVE-2005-3662: bug filed


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-02-06 19:53:22 UTC (rev 3434)
+++ data/CVE/list	2006-02-06 20:16:19 UTC (rev 3435)
@@ -3660,7 +3660,7 @@
 CVE-2005-3663 (Unquoted Windows search path vulnerability in Kaspersky Anti-Virus 5.0 ...)
 	NOT-FOR-US: Kaspersky AV
 CVE-2005-3662 (Off-by-one buffer overflow in pnmtopng before 2.39, when using the ...)
-	- netpbm-free <unfixed> (medium)
+	- netpbm-free <unfixed> (medium; bug #351639)
 CVE-2005-3661 (Dell TrueMobile 2300 Wireless Broadband Router running firmware ...)
 	NOT-FOR-US: Dell hardware issue
 CVE-2005-3660 (Linux kernel 2.4 and 2.6 allows attackers to cause a denial of service ...)
@@ -3727,7 +3727,7 @@
 	NOT-FOR-US: SAP Web Application Server
 CVE-2005-3632 (Multiple buffer overflows in pnmtopng in netpbm 10.0 and earlier allow ...)
 	{DSA-904-1}
-	- netpbm-free 2:10.0-11
+	- netpbm-free <unfixed> (medium; bug #351639)
 	TODO: Check, whether this is the same as CVE-2005-3662
 CVE-2005-3631 (udev does not properly set permissions on certain files in /dev/input, ...)
 	NOTE: does not appear to affect debian, redhat-specific