[Secure-testing-commits] r14231 - in data: . CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2010-03-09 16:56:21 +0000 (Tue, 09 Mar 2010)
New Revision: 14231

Modified:
   data/CVE-2009-3555
   data/CVE/list
Log:
- new apache issue
- new samba issue (doesn't apply to Lenny)


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-03-09 10:06:31 UTC (rev 14230)
+++ data/CVE/list	2010-03-09 16:56:21 UTC (rev 14231)
@@ -522,8 +522,10 @@
 	RESERVED
 CVE-2010-0729
 	RESERVED
-CVE-2010-0728
+CVE-2010-0728 [samba insufficient permission validation]
 	RESERVED
+	- samba 2:3.4.7~dfsg-1 (high)
+	[lenny] - samba <not-affected> (Only affects 3.3.11, 3.4.6 and 3.5.0)
 CVE-2010-0727
 	RESERVED
 CVE-2010-0726 (Cross-site scripting (XSS) vulnerability in the tb-send.rb (TrackBack ...)
@@ -1325,7 +1327,7 @@
 CVE-2010-0435
 	RESERVED
 CVE-2010-0434 (The ap_read_request function in server/protocol.c in the Apache HTTP ...)
-	TODO: check
+	- apache2 2.2.15-1
 CVE-2010-0433 (The kssl_keytab_is_available function in ssl/kssl.c in OpenSSL before ...)
 	- openssl <not-affected> (Kerberos support not enabled)
 	NOTE: http://www.openwall.com/lists/oss-security/2010/03/03/5

Modified: data/CVE-2009-3555
===================================================================
--- data/CVE-2009-3555	2010-03-09 10:06:31 UTC (rev 14230)
+++ data/CVE-2009-3555	2010-03-09 16:56:21 UTC (rev 14231)
@@ -33,4 +33,5 @@
 
 Applications, which implement RfC 5746:
 - openssl 0.9.8m-1
+- apache 2.2.15-1