[Secure-testing-commits] r6898 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2007-10-10 15:23:54 +0000 (Wed, 10 Oct 2007)
New Revision: 6898

Modified:
   data/CVE/list
Log:
CVE-2004-2731 fixed in linux-2.6 2.6.18-1


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-10-10 15:00:57 UTC (rev 6897)
+++ data/CVE/list	2007-10-10 15:23:54 UTC (rev 6898)
@@ -92,7 +92,8 @@
 CVE-2004-2732 (nbmember.cgi in Netbilling 2.0 allows remote attackers to obtain ...)
 	NOT-FOR-US: Netbilling
 CVE-2004-2731 (Multiple integer overflows in Sbus PROM driver ...)
-	- linux-2.6 <unfixed>
+	- linux-2.6 2.6.18-1
+	NOTE: bufsize is unsigned since (at least) 2.6.18, might be fixed in prior versions
 CVE-2004-2730 (Sysinternals PsTools before 2.05, including (1) PsExec before 1.54, ...)
 	NOT-FOR-US: PsTools
 CVE-2004-2729 (Inetd32 Administration Tool of Hummingbird Connectivity 7.1 and 9.0 ...)