[Secure-testing-commits] r23190 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2013-08-05 09:33:05 +0000 (Mon, 05 Aug 2013)
New Revision: 23190

Modified:
   data/CVE/list
Log:
add entry for CVE-2013-4852 with TODO

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-08-05 06:03:42 UTC (rev 23189)
+++ data/CVE/list	2013-08-05 09:33:05 UTC (rev 23190)
@@ -409,8 +409,13 @@
 	NOTE: https://kb.isc.org/article/AA-01015/0
 CVE-2013-4853
 	RESERVED
-CVE-2013-4852
+CVE-2013-4852 [PuTTY SSH handshake heap overflow]
 	RESERVED
+	- putty <unfixed>
+	- filezilla <unfixed>
+	NOTE: http://www.securityfocus.com/archive/1/527763/30/0
+	NOTE: http://svn.tartarus.org/sgt?view=revision&sortby=date&revision=9896
+	TODO: check
 CVE-2013-4851 (The vfs_hang_addrlist function in sys/kern/vfs_export.c in the NFS ...)
 	- kfreebsd-9 9.1-4 (bug #717958)
 	- kfreebsd-8 8.3-7 (bug #717959)