[Secure-testing-commits] r4815 - data/CVE

[Stefan Fritsch]

Author: stef-guest
Date: 2006-10-05 20:09:07 +0000 (Thu, 05 Oct 2006)
New Revision: 4815

Modified:
   data/CVE/list
Log:
some freebsd issues

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-10-05 20:01:21 UTC (rev 4814)
+++ data/CVE/list	2006-10-05 20:09:07 UTC (rev 4815)
@@ -1122,7 +1122,7 @@
 CVE-2006-4626 (Heap-based buffer overflow in alwil avast! Anti-virus Engine before ...)
 	NOT-FOR-US: avast! Anti-virus Engine
 CVE-2006-4625 (PHP 4.x up to 4.4.4 and PHP 5 up to 5.1.6 allows local users to bypass ...)
-	- php4 <unfixed> (bug filed, low)
+	- php4 <unfixed> (bug #391282, low)
 	- php5 <unfixed> (bug #391281, low)
 	[sarge] - php4 <no-dsa> (open_basedir violations not supported)
 CVE-2006-4624 (CRLF injection vulnerability in Utils.py in Mailman before 2.1.9rc1 ...)
@@ -1894,7 +1894,7 @@
 CVE-2006-4305 (Buffer overflow in SAP DB and MaxDB before 7.6.00.30 allows remote ...)
 	- maxdb-7.5.00 <unfixed> (high; bug #386182)
 CVE-2006-4304 (Buffer overflow in the sppp driver in FreeBSD 4.11 through 6.1, NetBSD ...)
-	TODO: check
+	- kfreebsd-5 <unfixed> (bug filed)
 CVE-2006-4303 (Race condition in (1) libnsl and (2) TLI/XTI API routines in Sun ...)
 	NOT-FOR-US: Solaris
 CVE-2006-4302 (The Java Plug-in J2SE 1.3.0_02 through 5.0 Update 5, and Java Web ...)
@@ -2183,7 +2183,7 @@
 CVE-2006-4179
 	RESERVED
 CVE-2006-4178 (Integer signedness error in the i386_set_ldt call in FreeBSD 5.5, and ...)
-	TODO: check
+	- kfreebsd-5 <unfixed> (bug filed)
 CVE-2006-4177
 	RESERVED
 CVE-2006-4176
@@ -2195,7 +2195,7 @@
 CVE-2006-4173
 	RESERVED
 CVE-2006-4172 (Integer overflow vulnerability in the i386_set_ldt call in FreeBSD ...)
-	TODO: check
+	- kfreebsd-5 <unfixed> (bug filed)
 CVE-2006-4171
 	RESERVED
 CVE-2006-4170