[Secure-testing-commits] r18460 - data/CVE

[Florian Weimer]

Author: fw
Date: 2012-02-16 19:15:48 +0000 (Thu, 16 Feb 2012)
New Revision: 18460

Modified:
   data/CVE/list
Log:
CVE-2011-0996: dhcpcd


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2012-02-16 17:27:00 UTC (rev 18459)
+++ data/CVE/list	2012-02-16 19:15:48 UTC (rev 18460)
@@ -14670,7 +14670,8 @@
 	NOTE: http://thread.gmane.org/gmane.comp.security.oss.general/4820
 	NOTE: inrodroduced in 4.2.0 and fixed in 4.2.1
 CVE-2011-0996 (dhcpcd before 5.2.12 allows remote attackers to execute arbitrary ...)
-	TODO: check
+	- dhcpcd <unfixed> (unimportant)
+	NOTE: Debian's dhcpcd.sh is not vulnerable.
 CVE-2011-0995 (The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 ...)
 	TODO: check
 CVE-2011-0994 (Stack-based buffer overflow in NFRAgent.exe in Novell File Reporter ...)