[Secure-testing-commits] r9580 - data/CVE

[white at alioth.debian.org]

Author: white
Date: 2008-08-15 05:24:29 +0000 (Fri, 15 Aug 2008)
New Revision: 9580

Modified:
   data/CVE/list
Log:
One ipsec-tools issue fixed in sid

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-08-14 21:14:08 UTC (rev 9579)
+++ data/CVE/list	2008-08-15 05:24:29 UTC (rev 9580)
@@ -36,7 +36,8 @@
 CVE-2008-3653 (Multiple unspecified vulnerabilities in TikiWiki CMS/Groupware before ...)
 	- tikiwiki <removed>
 CVE-2008-3652 (src/racoon/handler.c in racoon in ipsec-tools does not remove an ...)
-	TODO: check
+	- ipsec-tools 1:0.7.1-1 (low)
+	NOTE: attacker needs to be authenticated, see https://bugzilla.redhat.com/show_bug.cgi?id=456660
 CVE-2008-3651 (Memory leak in racoon/proposal.c in the racoon daemon in ipsec-tools ...)
 	TODO: check
 CVE-2008-3650 (Multiple unspecified vulnerabilities in Horde Groupware Webmail before ...)