[Secure-testing-commits] r12747 - data/CVE

[Nico Golde]

Author: nion
Date: 2009-09-04 15:27:21 +0000 (Fri, 04 Sep 2009)
New Revision: 12747

Modified:
   data/CVE/list
Log:
cveify silc issues

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-09-04 15:23:44 UTC (rev 12746)
+++ data/CVE/list	2009-09-04 15:27:21 UTC (rev 12747)
@@ -1,3 +1,18 @@
+CVE-2008-7159 [silc ASN1 encoding format string vulnerability]
+	- silc-toolkit 1.1.10-1 (low)
+	- silc-client 1.1-2 (low)
+	- silc-server <not-affected> (Vulnerable code not present)
+	NOTE: silc-client uses libsilc from silc-toolkit since 1.1-2
+CVE-2009-3051 [silc various format string vulnerabilities]
+	- silc-toolkit 1.1.10-1 (medium)
+	- silc-client 1.1-2 (medium)
+	- silc-server 1.1.2-1 (medium)
+	NOTE: silc-client/silc-server use libsilc from silc-toolkit since 1.1-2
+CVE-2008-7160 [silcd format string vulnerability in http server]
+	- silc-toolkit 1.1.10-1 (low)
+	- silc-client <not-affected> (Vulnerable code not present)
+	- silc-server 1.1.2-1 (low)
+	NOTE: silc-client/silc-server use libsilc from silc-toolkit since 1.1-2
 CVE-2009-3050 (Buffer overflow in the set_page_size function in util.cxx in HTMLDOC ...)
 	- htmldoc <unfixed> (medium; bug #537637)
 CVE-2009-3049 (Opera before 10.00 does not properly display all characters in ...)