[Secure-testing-commits] r5474 - data/CVE

[Stefan Fritsch]

Author: stef-guest
Date: 2007-02-18 20:47:55 +0100 (Sun, 18 Feb 2007)
New Revision: 5474

Modified:
   data/CVE/list
Log:
CVE-2007-0474 not fixed in smb4k 0.8.0

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-02-18 18:36:01 UTC (rev 5473)
+++ data/CVE/list	2007-02-18 19:47:55 UTC (rev 5474)
@@ -1228,7 +1228,9 @@
 CVE-2007-0475 (Multiple stack-based buffer overflows in utilities/smb4k_*.cpp in ...)
 	- smb4k 0.8.0-1 (low)
 CVE-2007-0474 (Smb4K before 0.8.0 allow local users, when present on the Smb4K ...)
-	- smb4k 0.8.0-1 (low)
+	- smb4k <unfixed> (low)
+	NOTE: not fixed in 0.8.0, see
+	NOTE: http://developer.berlios.de/bugs/?func=detailbug&bug_id=9631&group_id=769
 CVE-2007-0473 (The writeFile function in core/smb4kfileio.cpp in Smb4K before 0.8.0 ...)
 	- smb4k 0.8.0-1 (low)
 CVE-2007-0472 (Multiple race conditions in Smb4K before 0.8.0 allow local users to ...)