[Secure-testing-commits] r4471 - data/CVE

[Alec Berryman]

Author: alec-guest
Date: 2006-07-29 01:43:59 +0000 (Sat, 29 Jul 2006)
New Revision: 4471

Modified:
   data/CVE/list
Log:
* CVE-2006-3814 (cheesetracker): unfixed
* CVE-2006-3816 (krusader): file with passwords is chmod 0700, not exploitable


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-07-29 00:11:24 UTC (rev 4470)
+++ data/CVE/list	2006-07-29 01:43:59 UTC (rev 4471)
@@ -41,11 +41,11 @@
 CVE-2006-3817
 	RESERVED
 CVE-2006-3816 (Krusader 1.50-beta1 up to 1.70.0 stores passwords for remote ...)
-	- krusader <unfixed> (bug filed; low)
+	- krusader <not-affected> (bug #380063; file in directory with 0700 permissions)
 CVE-2006-3815 (heartbeat.c in heartbeat before 2.0.6 sets insecure permissions in an ...)
 	- heartbeat <unfixed> (bug #379904)
 CVE-2006-3814 (Buffer overflow in the Loader_XM::load_instrument_internal function in ...)
-	TODO: check
+	- cheesetracker <unfixed>
 CVE-2006-3813
 	RESERVED
 CVE-2006-3812