[Secure-testing-commits] r7312 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2007-11-15 21:40:20 +0000 (Thu, 15 Nov 2007)
New Revision: 7312

Modified:
   data/CVE/list
Log:
CVE-2007-5398, CVE-2007-4572 fixed in samba 3.0.27-1, bumping impact


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-11-15 21:36:31 UTC (rev 7311)
+++ data/CVE/list	2007-11-15 21:40:20 UTC (rev 7312)
@@ -1969,8 +1969,9 @@
 	RESERVED
 CVE-2007-5399
 	RESERVED
-CVE-2007-5398
+CVE-2007-5398 [remote code execution in samba when running nmbd as WINS server]
 	RESERVED
+	- samba 3.0.27-1 (high)
 CVE-2007-5397
 	RESERVED
 CVE-2007-5396 (Format string vulnerability in the ext_yahoo_contact_added function in ...)
@@ -4155,9 +4156,9 @@
 CVE-2007-4573 (The IA32 system call emulation functionality in Linux kernel 2.4.x and ...)
 	{DSA-1381-2 DSA-1378-2 DSA-1378-1}
 	- linux-2.6 2.6.22-5 (medium)
-CVE-2007-4572 [buffer overflow leading to code execution in nmbd]
+CVE-2007-4572 [buffer overflow in nmbd when processing GETDC logon server requests]
 	RESERVED
-	- samba <unfixed> (medium; bug #451385)
+	- samba 3.0.27-1 (high; bug #451385)
 CVE-2007-4571 (The snd_mem_proc_read function in sound/core/memalloc.c in the ...)
 	- linux-2.6 2.6.22-5 (low; bug #444571)
 	NOTE: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=600