[Secure-testing-commits] r14046 - data/CVE

[Michael Gilbert]

Author: gilbert-guest
Date: 2010-02-06 18:51:16 +0000 (Sat, 06 Feb 2010)
New Revision: 14046

Modified:
   data/CVE/list
Log:
new ocsinventory and nautilus issues

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-02-05 21:14:37 UTC (rev 14045)
+++ data/CVE/list	2010-02-06 18:51:16 UTC (rev 14046)
@@ -176,6 +176,14 @@
 	TODO: check
 CVE-2010-0467 (Directory traversal vulnerability in the ccNewsletter ...)
 	TODO: check
+CVE-2010-XXXX [ocsinventory-server: multiple vulnerabilities]
+	- ocsinventory-server <undetermined> (medium)
+	NOTE: http://www.openwall.com/lists/oss-security/2010/02/01/4
+	NOTE: claimed fixed in upstream 1.02.1
+	TODO: check 
+CVE-2010-XXXX [nautilus: file preview html script execution]
+	- nautilus <not-affected> (proof-of-concept script is previewed as text, not executed)
+	NOTE: http://seclists.org/fulldisclosure/2010/Feb/112
 CVE-2010-XXXX [samba: remote zero-day vulnerability]
 	- samba <unfixed> (high; bug #568493)
 CVE-2010-XXXX [glibc: house of mind vulnerability]