[Secure-testing-commits] r7702 - data/CVE

[jmm-guest at alioth.debian.org]

Author: jmm-guest
Date: 2007-12-23 12:35:02 +0000 (Sun, 23 Dec 2007)
New Revision: 7702

Modified:
   data/CVE/list
Log:
wireshark dupe confirmed


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-12-23 12:28:02 UTC (rev 7701)
+++ data/CVE/list	2007-12-23 12:35:02 UTC (rev 7702)
@@ -1066,7 +1066,8 @@
 	[sarge] - ethereal <not-affected> (Vulnerable code not present)
 CVE-2007-6113 (Wireshark (formerly Ethereal) 0.10.12 to 0.99.6 allows remote ...)
 	{DTSA-92-1}
-	NOTE: This is likely a dupe of CVE-2007-4721, pinged MITRE
+	- wireshark 0.99.6pre1-1 (low)
+	[etch] - wireshark <no-dsa> (Minor issue, exotic dissector, very intrusive backport)
 CVE-2007-6114 (Multiple buffer overflows in Wireshark (formerly Ethereal) 0.99.0 ...)
 	{DSA-1414-1 DTSA-92-1}
 	- wireshark 0.99.7~pre1-1 (medium; bug #452381)
@@ -5150,8 +5151,7 @@
 CVE-2007-4722 (Multiple stack-based buffer overflows in the Quantum Streaming ...)
 	NOT-FOR-US: Quantum Streaming
 CVE-2007-4721 (Integer signedness error in the DNP3 dissector in Wireshark 0.99.5 and ...)
-	- wireshark 0.99.6pre1-1 (low)
-	[etch] - wireshark <no-dsa> (Minor issue, exotic dissector, very intrusive backport)
+	NOT-FOR-US: Wireshark dupe, will be rejected
 CVE-2007-4720 (Unspecified vulnerability in the Shared Trace Service in Hitachi ...)
 	NOT-FOR-US: Hitachi
 CVE-2007-4719 (SQL injection vulnerability in read.php in 212cafeBoard 6.30 Beta ...)