[Secure-testing-commits] r14026 - data/CVE

[Nico Golde]

Author: nion
Date: 2010-02-04 13:05:15 +0000 (Thu, 04 Feb 2010)
New Revision: 14026

Modified:
   data/CVE/list
Log:
- fetchmail heap overflow fixed in 6.3.13-2
- cveified and verified CVE-2010-0305 (ejabberd)


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-02-04 12:09:19 UTC (rev 14025)
+++ data/CVE/list	2010-02-04 13:05:15 UTC (rev 14026)
@@ -1,7 +1,7 @@
-CVE-2010-XXXX [ejabberd DoS via "c2s" messages]
-	- ejabberd <unfixed>
-	NOTE: https://support.process-one.net/browse/EJAB-1173
-	TODO: check
+CVE-2010-XXXX [fetchmail heap overflow]
+	- fetchmail 6.3.13-2 (low)
+	NOTE: the conditions so that this is exploitable are rather obscure
+	NOTE: CVE id requested by upstream on oss-sec
 CVE-2010-XXXX [moinmoin unspecified issue]
 	- moin <unfixed>
 	NOTE: http://moinmo.in/SecurityFixes
@@ -498,8 +498,10 @@
 	RESERVED
 CVE-2010-0306
 	RESERVED
-CVE-2010-0305
+CVE-2010-0305 [ejabberd DoS via "c2s" messages]
 	RESERVED
+	- ejabberd <unfixed> (medium; bug #568383)
+	NOTE: https://support.process-one.net/browse/EJAB-1173
 CVE-2010-0304 [wireshark LWRES issue]
 	RESERVED
 	{DSA-1983-1}