[Secure-testing-commits] r11882 - data/CVE

[Giuseppe Iuculano]

Author: derevko-guest
Date: 2009-05-12 13:30:52 +0000 (Tue, 12 May 2009)
New Revision: 11882

Modified:
   data/CVE/list
Log:
CVE-2008-3903: remove NOT-FOR-US, asterisk is affected


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-05-12 11:14:04 UTC (rev 11881)
+++ data/CVE/list	2009-05-12 13:30:52 UTC (rev 11882)
@@ -10612,7 +10612,8 @@
 	- ruby1.8 1.8.7.72-1 (bug #498978)
 	- ruby1.9 1.9.0.2-6 (bug #498977)
 CVE-2008-3903 (Asterisk Open Source 1.2.x before 1.2.32, 1.4.x before 1.4.24.1, and ...)
-	NOT-FOR-US: Asterisk PBX
+	- asterisk <unfixed> (low; bug #522528)
+	NOTE: http://downloads.asterisk.org/pub/security/AST-2009-003.html
 CVE-2008-3902 (HP firmware 68DTT F.0D stores pre-boot authentication passwords in the ...)
 	NOT-FOR-US: HP firmware 68DTT
 CVE-2007-6717 (Buffer overflow in tftp in bos.net.tcp.client in IBM AIX 5.2.0 and ...)