[Secure-testing-commits] r6066 - data/CVE

[fw at alioth.debian.org]

Author: fw
Date: 2007-06-27 12:38:20 +0000 (Wed, 27 Jun 2007)
New Revision: 6066

Modified:
   data/CVE/list
Log:
CVE-2007-2798: krb5


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-06-27 11:17:58 UTC (rev 6065)
+++ data/CVE/list	2007-06-27 12:38:20 UTC (rev 6066)
@@ -1381,7 +1381,8 @@
 	RESERVED
 CVE-2007-2833 (Emacs 21 allows user-assisted attackers to cause a denial of service ...)
 	{DSA-1316-1}
-	TODO: check
+	- emacs21 <unfixed> (bug #408929; low)
+	- emacs-snapshot <unfixed>
 CVE-2007-2832 (Cross-site scripting (XSS) vulnerability in the web application ...)
 	NOT-FOR-US: Cisco
 CVE-2007-2831 (Array index error in the (1) ieee80211_ioctl_getwmmparams and (2) ...)
@@ -1454,7 +1455,7 @@
 CVE-2007-2799 (Integer overflow in the &quot;file&quot; program 4.20, when running on 32-bit ...)
 	- file 4.21-1 (medium)	
 CVE-2007-2798 (Stack-based buffer overflow in the rename_principal_2_svc function in ...)
-	TODO: check
+	- krb5 <unfixed> (high; bug #430785)
 CVE-2006-7205 (The array_fill function in ext/standard/array.c in PHP 4.4.2 and 5.1.2 ...)
 	TODO: check
 CVE-2006-7204 (The imap_body function in PHP before 4.4.4 does not implement safemode ...)