[Secure-testing-commits] r8733 - data/CVE

thijs at alioth.debian.org thijs at alioth.debian.org
Thu May 8 10:34:13 UTC 2008


Author: thijs
Date: 2008-05-08 10:34:11 +0000 (Thu, 08 May 2008)
New Revision: 8733

Modified:
   data/CVE/list
Log:
PHP issues cveified, no checking of rejected issue needed


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-05-08 09:14:17 UTC (rev 8732)
+++ data/CVE/list	2008-05-08 10:34:11 UTC (rev 8733)
@@ -1,6 +1,5 @@
 CVE-2008-6339
 	REJECTED
-	TODO: check
 CVE-2008-2112 (Unspecified vulnerability in Sun Ray Kiosk Mode 4.0 allows local and ...)
 	TODO: check
 CVE-2008-2111 (The ActiveX Control (yNotifier.dll) in Yahoo! Assistant 3.6 and ...)
@@ -10,9 +9,14 @@
 CVE-2008-2109 (field.c in the libid3tag 0.15.0b library allows context-dependent ...)
 	TODO: check
 CVE-2008-2108 (The GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, ...)
-	TODO: check
+	- php5 <unfixed> (low)
+	- php4 <unfixed> (low)	
+	NOTE: http://www.sektioneins.de/advisories/SE-2008-02.txt
+	NOTE: I don't believe we need to address this, likely no-dsa, but needs further checking
 CVE-2008-2107 (The GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, ...)
-	TODO: check
+	- php5 <unfixed> (low)
+	- php4 <unfixed> (low)	
+	NOTE: closely related to CVE-2008-2108
 CVE-2008-2106 (Call of Duty 4 (CoD4) 1.5 and earlier allows remote authenticated ...)
 	TODO: check
 CVE-2008-2105 (email_in.pl in Bugzilla 2.23.4, and later versions before 3.0, allows ...)
@@ -135,11 +139,6 @@
 	TODO: check
 CVE-2008-2043 (Multiple cross-site request forgery (CSRF) vulnerabilities in cPanel, ...)
 	TODO: check
-CVE-2008-XXXX [php suboptimal seeding]
-	- php5 <unfixed> (low)
-	- php4 <unfixed> (low)	
-	NOTE: http://www.sektioneins.de/advisories/SE-2008-02.txt
-	NOTE: I don't believe we need to address this, likely no-dsa, but needs further checking
 CVE-2008-2085 [stack-based buffer overflow in get_remote_ip_media and get_remote_ipv6_media function]
 	RESERVED
 	- sip-tester 2.0.1-1.2 (medium; bug #479039)




More information about the Secure-testing-commits mailing list