[Secure-testing-commits] r7938 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2008-01-16 12:21:03 +0000 (Wed, 16 Jan 2008)
New Revision: 7938

Modified:
   data/CVE/list
Log:
if you can crash an irc server by a crafted join message this is definetly not a low issue so marking medium

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-01-16 09:14:09 UTC (rev 7937)
+++ data/CVE/list	2008-01-16 12:21:03 UTC (rev 7938)
@@ -1998,7 +1998,7 @@
 	- linux-2.6 2.6.23-2
 	NOTE: kernel-sec is aware of this
 CVE-2007-6062 (irc-channel.c in ngIRCd before 0.10.3 allows remote attackers to cause ...)
-	- ngircd 0.10.3-1 (bug #451875)
+	- ngircd 0.10.3-1 (medium; bug #451875)
 	[etch] - ngircd <no-dsa> (Minor issue)
 CVE-2007-6061 (Audacity 1.3.2 creates a temporary directory with a predictable name ...)
 	- audacity <unfixed> (bug #453283; low)