[Secure-testing-commits] r30246 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2014-11-22 09:56:00 +0000 (Sat, 22 Nov 2014)
New Revision: 30246

Modified:
   data/CVE/list
Log:
CVE-2014-{4199,4200} also affects open-vm-tools

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-11-22 09:28:37 UTC (rev 30245)
+++ data/CVE/list	2014-11-22 09:56:00 UTC (rev 30246)
@@ -11910,9 +11910,11 @@
 CVE-2014-4201 (Unspecified vulnerability in the Oracle WebLogic Server component in ...)
 	NOT-FOR-US: Oracle
 CVE-2014-4200 (vm-support 0.88 in VMware Tools, as distributed with VMware ...)
-	NOT-FOR-US: VMware
+	- open-vm-tools <unfixed>
+	NOTE: http://seclists.org/fulldisclosure/2014/Aug/71
 CVE-2014-4199 (vm-support 0.88 in VMware Tools, as distributed with VMware ...)
-	NOT-FOR-US: VMware
+	- open-vm-tools <unfixed>
+	NOTE: http://seclists.org/fulldisclosure/2014/Aug/71
 CVE-2014-4198
 	RESERVED
 CVE-2014-4197 (Multiple SQL injection vulnerabilities in Bank Soft Systems (BSS) RBS ...)