[Secure-testing-commits] r23250 - data/CVE

Salvatore Bonaccorso carnil at alioth.debian.org
Thu Aug 8 11:56:45 UTC 2013


Author: carnil
Date: 2013-08-08 11:56:45 +0000 (Thu, 08 Aug 2013)
New Revision: 23250

Modified:
   data/CVE/list
Log:
adjust CVE-2013-4215, mark as unfixed (as source is affected), but add severity unimortant, as check_ipxping is not build and installed

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-08-08 11:54:27 UTC (rev 23249)
+++ data/CVE/list	2013-08-08 11:56:45 UTC (rev 23250)
@@ -1892,7 +1892,8 @@
 	RESERVED
 CVE-2013-4215 [IPXPING_COMMAND uses fixed location in /tmp]
 	RESERVED
-	- nagios-plugins <not-affected> (vulnerable code present, but check_ipxping not build and installed)
+	- nagios-plugins <unfixed> (unimportant)
+	NOTE: vulnerable code present, but check_ipxping not build and installed
 CVE-2013-4214 [insecure temporary file usage]
 	RESERVED
 	- nagios3 <unfixed> (low; bug #719056)




More information about the Secure-testing-commits mailing list