[Secure-testing-commits] r10264 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2008-11-03 17:36:59 +0000 (Mon, 03 Nov 2008)
New Revision: 10264

Modified:
   data/CVE/list
Log:
todo for uw-imap issue, cveified net-snmp

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-11-03 15:14:33 UTC (rev 10263)
+++ data/CVE/list	2008-11-03 17:36:59 UTC (rev 10264)
@@ -1,6 +1,7 @@
 CVE-2008-XXXX [buffer overflow via large mailbox in dmail/tmail of uw-imap]
 	- uw-imap 7:2007d~dfsg-1
 	NOTE: CVE id requested on oss-sec
+	TODO: check alpine
 CVE-2008-XXXX [ktorrent issues]
 	- ktorrent2.2 2.2.8.dfsg.1-1 (bug #504178)
 	- ktorrent <unfixed>
@@ -26,9 +27,6 @@
 	[etch] - dia <no-dsa> (Minor issue, only vulnerable when called from certain dir)
 CVE-2008-XXXX [virtualbox-ose: insecure temp file usage]
 	- virtualbox-ose <unfixed> (low; bug #504149)
-CVE-2008-XXXX [DoS in getbulk handling code in net-snmp]
-	- net-snmp <unfixed> (bug #504150)
-	NOTE: CVE id requested
 CVE-2008-4801 (Heap-based buffer overflow in the Data Protection for SQL CAD service ...)
 	NOT-FOR-US: SQL CAD service
 CVE-2008-4800 (The DebugDiag ActiveX control in CrashHangExt.dll, possibly 1.0, in ...)
@@ -1167,8 +1165,9 @@
 	RESERVED
 CVE-2008-4310
 	RESERVED
-CVE-2008-4309
+CVE-2008-4309 [DoS in getbulk handling code in net-snmp]
 	RESERVED
+	- net-snmp <unfixed> (bug #504150)
 CVE-2008-4308
 	RESERVED
 CVE-2008-4307