[Secure-testing-commits] r12167 - data/CVE

[Michael Gilbert]

Author: gilbert-guest
Date: 2009-06-19 18:07:55 +0000 (Fri, 19 Jun 2009)
New Revision: 12167

Modified:
   data/CVE/list
Log:
tracking new moin and pcsc-lite vulnerabilities


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-06-19 17:27:40 UTC (rev 12166)
+++ data/CVE/list	2009-06-19 18:07:55 UTC (rev 12167)
@@ -1,3 +1,9 @@
+CVE-2009-XXXX [moin: heirarchical ACL vulnerability]
+	- moin 1.8.4-1 (low; bug #533673)
+	TODO: check whether etch/lenny versions are affected or not
+CVE-2009-XXXX [pcsc-lite: creates world-writable directory]
+	- pcsc-lite <unfixed> (low; bug #533670)
+	TODO: unstable may already be fixed; need to check
 CVE-2009-XXXX ["slowloris" denial-of-service vulnerabilty in webservers]
 	- apache2 <unfixed> (low; bug #533661)
 	- apache <unfixed> (low; bug #533662)