[Secure-testing-commits] r6362 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2007-08-20 14:07:16 +0000 (Mon, 20 Aug 2007)
New Revision: 6362

Modified:
   data/CVE/list
Log:
samba 3.x not affected by CVE-2003-1332
CVE-2003-1331 affects oldstable


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-08-20 13:58:29 UTC (rev 6361)
+++ data/CVE/list	2007-08-20 14:07:16 UTC (rev 6362)
@@ -2238,9 +2238,10 @@
 CVE-2006-7208 (PHP remote file inclusion vulnerability in download.php in the Adam ...)
 	NOT-FOR-US: phpBB component com_forum
 CVE-2003-1332 (Stack-based buffer overflow in the reply_nttrans function in Samba ...)
-	TODO: check
+	- samba <not-affected> (Vulnerable version not in any suite)
 CVE-2003-1331 (Stack-based buffer overflow in the mysql_real_connect function in the ...)
-	TODO: check
+	- mysql-dfsg-5.0 <not-affected> (Newer versions in all suites apart oldstable)
+	NOTE: oldstable is affected, everything else uses libmysqlclient15
 CVE-2007-3389 (Wireshark before 0.99.6 allows remote attackers to cause a denial of ...)
 	- wireshark 0.99.6pre1-1
 	[etch] - wireshark <not-affected> (Only affected 0.99.5)