[Secure-testing-commits] r21803 - data/CVE

[Joey Hess]

Author: joeyh
Date: 2013-04-01 21:14:25 +0000 (Mon, 01 Apr 2013)
New Revision: 21803

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-04-01 14:23:14 UTC (rev 21802)
+++ data/CVE/list	2013-04-01 21:14:25 UTC (rev 21803)
@@ -102,12 +102,10 @@
 	RESERVED
 CVE-2013-2687
 	RESERVED
-CVE-2013-2686 [Denial of Service in HTTP server]
-	RESERVED
+CVE-2013-2686 (main/http.c in the HTTP server in Asterisk Open Source 1.8.x before ...)
 	- asterisk <unfixed> (bug #704114)
 	NOTE: https://issues.asterisk.org/jira/browse/ASTERISK-20967
-CVE-2013-2685 [Buffer Overflow Exploit Through SIP SDP Header]
-	RESERVED
+CVE-2013-2685 (Stack-based buffer overflow in res/res_format_attr_h264.c in Asterisk ...)
 	- asterisk <not-affected> (H264 code not yet present)
 	NOTE: https://issues.asterisk.org/jira/browse/ASTERISK-20901
 CVE-2013-2684
@@ -1101,8 +1099,7 @@
 	- bind9 1:9.8.4.dfsg.P1-6+nmu1 (bug #704174)
 CVE-2013-2265
 	RESERVED
-CVE-2013-2264 [Username disclosure in SIP channel driver]
-	RESERVED
+CVE-2013-2264 (The SIP channel driver in Asterisk Open Source 1.8.x before 1.8.20.2, ...)
 	- asterisk <unfixed> (low; bug #704114)
 	NOTE: https://issues.asterisk.org/jira/browse/ASTERISK-21013
 CVE-2013-2263 (Unspecified vulnerability in Citrix Access Gateway Standard Edition ...)
@@ -4962,8 +4959,8 @@
 	RESERVED
 CVE-2013-0660
 	RESERVED
-CVE-2013-0659
-	RESERVED
+CVE-2013-0659 (The debugging feature on the Siemens CP 1604 and CP 1616 interface ...)
+	TODO: check
 CVE-2013-0658 (Heap-based buffer overflow in RFManagerService.exe in Schneider ...)
 	NOT-FOR-US: Schneider Electric Accutech Manager
 CVE-2013-0657 (Stack-based buffer overflow in Schneider Electric Interactive ...)
@@ -6563,8 +6560,8 @@
 	RESERVED
 CVE-2013-0131
 	RESERVED
-CVE-2013-0130
-	RESERVED
+CVE-2013-0130 (Multiple buffer overflows in Core FTP before 2.2 build 1769 allow ...)
+	TODO: check
 CVE-2013-0129
 	RESERVED
 CVE-2013-0128