[Secure-testing-commits] r33475 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-04-10 05:35:55 +0000 (Fri, 10 Apr 2015)
New Revision: 33475

Modified:
   data/CVE/list
Log:
Add CVE-2014-0230, unverified which tomcat versions affected; left TODO

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-04-09 21:53:12 UTC (rev 33474)
+++ data/CVE/list	2015-04-10 05:35:55 UTC (rev 33475)
@@ -33632,8 +33632,13 @@
 CVE-2014-0231 (The mod_cgid module in the Apache HTTP Server before 2.4.10 does not ...)
 	{DSA-2989-1 DLA-66-1}
 	- apache2 2.4.10-1
-CVE-2014-0230
+CVE-2014-0230 [non-persistent DoS attack by feeding data by aborting an upload]
 	RESERVED
+	- tomcat6 <unfixed>
+	- tomcat7 <unfixed>
+	- tomcat8 <unfixed>
+	TODO: check which versions affected
+	NOTE: https://svn.apache.org/viewvc?view=revision&revision=1603781
 CVE-2014-0229
 	RESERVED
 CVE-2014-0228 (Apache Hive before 0.13.1, when in SQL standards based authorization ...)