[Secure-testing-commits] r26951 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2014-05-18 06:11:18 +0000 (Sun, 18 May 2014)
New Revision: 26951

Modified:
   data/CVE/list
Log:
Add new nagios-plugins issue

Mark as unimportant as check_dhcp et al. are not installed with root
suid permissions by default on Debian. See also the notes in
/usr/share/doc/nagios-plugins/README.Debian.gz

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-05-17 21:14:10 UTC (rev 26950)
+++ data/CVE/list	2014-05-18 06:11:18 UTC (rev 26951)
@@ -1,3 +1,6 @@
+CVE-2014-XXXX [check_dhcp: arbitray option file read]
+	- nagios-plugins <unfixed> (unimportant)
+	NOTE: check_dhcp is not installed with root suid permissions in Debian
 CVE-2014-XXXX [memory corruption]
 	- libgadu 1:1.12.0~rc3-1
 CVE-2014-3749