[Secure-testing-commits] r9528 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2008-08-07 09:14:21 +0000 (Thu, 07 Aug 2008)
New Revision: 9528

Modified:
   data/CVE/list
Log:
new openoffice issue (CVE-2008-3437)
NFU
CVE-2003-1562 fixed in openssh 1:3.8.1p1-8.sarge.4


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-08-07 09:02:46 UTC (rev 9527)
+++ data/CVE/list	2008-08-07 09:14:21 UTC (rev 9528)
@@ -94,7 +94,7 @@
 CVE-2008-3438 (Apple Mac OS X does not properly verify the authenticity of updates, ...)
 	NOT-FOR-US: Apple Mac OS X
 CVE-2008-3437 (OpenOffice.org (OOo) before 2.1.0 does not properly verify the ...)
-	TODO: check
+	- openoffice.org <unfixed> (low; bug #494100)
 CVE-2008-3436 (The GUP generic update process in Notepad++ before 4.8.1 does not ...)
 	NOT-FOR-US: Notepad++
 CVE-2008-3435 (LinkedIn Browser Toolbar 3.0.3.1100 and earlier does not properly ...)
@@ -114,7 +114,7 @@
 CVE-2008-3426 (Unspecified vulnerability in the Solaris Platform Information and ...)
 	NOT-FOR-US: Solaris
 CVE-2008-3425 (Unspecified vulnerability in the Sun Java System Web Server 7.0 plugin ...)
-	TODO: check
+	NOT-FOR-US: Sun Java System Web Server
 CVE-2008-3424 (Condor before 7.0.4 does not properly handle wildcards in the ...)
 	NOT-FOR-US: Condor
 CVE-2008-3423 (IBM WebSphere Portal 5.1 through 6.1.0.0 allows remote attackers to ...)
@@ -124,7 +124,7 @@
 CVE-2004-2760 (sshd in OpenSSH 3.5p1, when PermitRootLogin is disabled, immediately ...)
 	TODO: check
 CVE-2003-1562 (sshd in OpenSSH 3.6.1p2 and earlier, when PermitRootLogin is disabled ...)
-	TODO: check
+	- openssh 1:3.8.1p1-8.sarge.4 (low)
 CVE-2008-3431 (The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM ...)
 	- virtualbox-ose <not-affected> (affects only windows host systems)
 	NOTE: CORE-2008-0716