[Secure-testing-commits] r4039 - data/CVE

[Alec Berryman]

Author: alec-guest
Date: 2006-05-21 21:28:52 +0000 (Sun, 21 May 2006)
New Revision: 4039

Modified:
   data/CVE/list
Log:
* fastjar bug number
* CVE-2005-3863: orpheus and motor also affected (medium), bugs filed


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-05-21 21:02:46 UTC (rev 4038)
+++ data/CVE/list	2006-05-21 21:28:52 UTC (rev 4039)
@@ -7325,7 +7325,7 @@
 CVE-2005-3991 (Multiple cross-site scripting (XSS) vulnerabilities in phpMyChat ...)
 	NOT-FOR-US: phpMyChat
 CVE-2005-3990 (Directory traversal vulnerability in FastJar 0.93 allows remote ...)
-	- fastjar <unfixed> (bug filed; low)
+	- fastjar <unfixed> (bug 368397; low)
 CVE-2005-3989 (Memory leak in Avaya TN2602AP IP Media Resource 320 circuit pack ...)
 	NOT-FOR-US: Avaya hardware
 CVE-2005-3988 (SQL injection vulnerability in article.php in Pineapple Technologies ...)
@@ -7720,8 +7720,11 @@
 CVE-2005-3863 (Stack-based buffer overflow in kkstrtext.h in ktools library 0.3 and ...)
 	{DTSA-23-1}
 	- centericq 4.21.0-6 (bug #340959; medium)
-	TODO: Check orpheus and motor
+	- orpheus <unfixed> (bug filed; medium)
+	- motor <unfixed> (bug filed; medium)
+	NOTE: DTSA is for centericq only
 	NOTE: This affects Sarge and Woody centericq
+	NOTE: This affects Sarge and Woody motor
 CVE-2005-3862 (Buffer overflow in unalz before 0.53 allows remote attackers to ...)
 	{DSA-959-1}
 	- unalz <unfixed> (bug #340842; medium)