[Secure-testing-commits] r8123 - data/CVE

[stef-guest at alioth.debian.org]

Author: stef-guest
Date: 2008-02-10 17:57:47 +0000 (Sun, 10 Feb 2008)
New Revision: 8123

Modified:
   data/CVE/list
Log:
new linux issues

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-02-09 18:57:30 UTC (rev 8122)
+++ data/CVE/list	2008-02-10 17:57:47 UTC (rev 8123)
@@ -83,8 +83,9 @@
 	NOT-FOR-US: All Club CMS (ACCMS)
 CVE-2008-0601 (SQL injection vulnerability in index.php in All Club CMS (ACCMS) ...)
 	NOT-FOR-US: All Club CMS (ACCMS)
-CVE-2008-0600
+CVE-2008-0600 [linux vmsplice privilege escalation vulnerability]
 	RESERVED
+	- linux-2.6 <unfixed> (high)
 CVE-2008-0599
 	RESERVED
 CVE-2008-0598
@@ -1121,8 +1122,9 @@
 	RESERVED
 CVE-2008-0164
 	RESERVED
-CVE-2008-0163
+CVE-2008-0163 [linux vserver kernel allows to access other vservers via symlinks]
 	RESERVED
+	- linux-2.6 <unfixed> (high)
 CVE-2008-0162
 	RESERVED
 CVE-2008-0302 (Untrusted search path vulnerability in apt-listchanges.py in ...)
@@ -2555,8 +2557,9 @@
 	NOT-FOR-US: WebED
 CVE-2007-6212 (Directory traversal vulnerability in region.php in KML share 1.1 ...)
 	NOT-FOR-US: KML share
-CVE-2008-0010
+CVE-2008-0010 [linux vmsplice local priv escalation]
 	RESERVED
+	- linux-2.6 <unfixed>
 CVE-2008-0009 [kernel: insecure dereference of memory refs from user space, local priv escalation]
 	RESERVED
 	- linux-2.6 <unfixed>