[Secure-testing-commits] r15661 - data/CVE

[Steffen Joeris]

Author: white
Date: 2010-12-08 06:10:42 +0000 (Wed, 08 Dec 2010)
New Revision: 15661

Modified:
   data/CVE/list
Log:
freeradius issue non DoS issue

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-12-08 04:52:33 UTC (rev 15660)
+++ data/CVE/list	2010-12-08 06:10:42 UTC (rev 15661)
@@ -1929,7 +1929,8 @@
 CVE-2010-3698 (The KVM implementation in the Linux kernel before 2.6.36 does not ...)
 	- linux-2.6 2.6.32-28
 CVE-2010-3697 (The wait_for_child_to_die function in main/event.c in FreeRADIUS 2.1.x ...)
-	- freeradius 2.1.10+dfsg-1 (bug #600176)
+	- freeradius 2.1.10+dfsg-1 (bug #600176; unimportant)
+	NOTE: requires server to be down already
 CVE-2010-3696 (The fr_dhcp_decode function in lib/dhcp.c in FreeRADIUS 2.1.9, in ...)
 	- freeradius 2.1.10+dfsg-1 (bug #600176)
 	[lenny] - freeradius <not-affected> (Vulnerable code not present)