[Secure-testing-commits] r12731 - data/CVE

[Michael Gilbert]

Author: gilbert-guest
Date: 2009-09-02 02:13:18 +0000 (Wed, 02 Sep 2009)
New Revision: 12731

Modified:
   data/CVE/list
Log:
new kernel issues

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-09-01 23:08:31 UTC (rev 12730)
+++ data/CVE/list	2009-09-02 02:13:18 UTC (rev 12731)
@@ -111,9 +111,13 @@
 CVE-2009-3003 (Microsoft Internet Explorer 6 through 8 allows remote attackers to ...)
 	NOT-FOR-US: Microsoft Internet Explorer
 CVE-2009-3002 (The Linux kernel before 2.6.31-rc7 does not initialize certain data ...)
-	TODO: check
+	- linux-2.6 <unfixed> (low)
+	- linux-2.6.24 <removed>
+	NOTE: minor info leaks
 CVE-2009-3001 (The llc_ui_getname function in net/llc/af_llc.c in the Linux kernel ...)
-	TODO: check
+	- linux-2.6 <unfixed> (low)
+	- linux-2.6.24 <removed>
+	NOTE: minor info leak
 CVE-2009-3000 (The sockfs module in the kernel in Sun Solaris 10 and OpenSolaris ...)
 	NOT-FOR-US: Sun Solaris
 CVE-2008-7131 (Unspecified vulnerability in DB2 Monitoring Console 2.2.4 and earlier ...)