[Secure-testing-commits] r3357 - data/CVE

[Florian Weimer]

Author: fw
Date: 2006-01-24 12:12:09 +0000 (Tue, 24 Jan 2006)
New Revision: 3357

Modified:
   data/CVE/list
Log:
CVE-2006-0225: new OpenSSH issue


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-01-24 09:25:23 UTC (rev 3356)
+++ data/CVE/list	2006-01-24 12:12:09 UTC (rev 3357)
@@ -316,8 +316,9 @@
 	NOT-FOR-US: lpsched in Sun Solaris
 CVE-2006-0226 (Integer overflow in IEEE 802.11 network subsystem (ieee80211_ioctl.c) ...)
 	NOT-FOR-US: freebsd kernel
-CVE-2006-0225
+CVE-2006-0225 [scp in OpenSSH suffers from shell code injection in local-to-local copies]
 	RESERVED
+	- openssh <unfixed> (low; bug #349645)
 CVE-2006-0224
 	RESERVED
 CVE-2005-4665 (Cross-site scripting (XSS) vulnerability in PunBB 1.2.6 and earlier ...)