[Secure-testing-commits] r11822 - data/CVE

[Luciano Bello]

Author: luciano
Date: 2009-05-06 21:30:55 +0000 (Wed, 06 May 2009)
New Revision: 11822

Modified:
   data/CVE/list
Log:
CVE-2009-1255 in memcached and memcachedb


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-05-06 21:14:15 UTC (rev 11821)
+++ data/CVE/list	2009-05-06 21:30:55 UTC (rev 11822)
@@ -938,7 +938,14 @@
 CVE-2009-1256 (SQL injection vulnerability in FlexCMS 2.5 allows remote attackers to ...)
 	NOT-FOR-US: FlexCMS
 CVE-2009-1255 (The process_stat function in (1) Memcached before 1.2.8 and (2) ...)
-	TODO: check
+	- memcached 1.2.8-1 (low)
+	[etch] - memcached <no-dsa> (Minor issue)
+	[lenny] - memcached <no-dsa> (Minor issue)
+	[squeeze] - memcached <no-dsa> (Minor issue)
+	- memcachedb <unfixed> (low; bug #527330)
+	[etch] - memcachedb <no-dsa> (Minor issue)
+	[lenny] - memcachedb <no-dsa> (Minor issue)
+	[squeeze] - memcachedb <no-dsa> (Minor issue)
 CVE-2008-6679 (Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and ...)
 	- ghostscript 8.64~dfsg-1 (medium; bug #524803)
 CVE-2008-6678 (SQL injection vulnerability in asp/includes/contact.asp in QuickerSite ...)