Secure testing commits - Oct 2008 - r10108 - data/CVE

Author: nion
Date: 2008-10-17 12:24:05 +0000 (Fri, 17 Oct 2008)
New Revision: 10108

Modified:
   data/CVE/list
Log:
redhat-cluster cveified

Modified: data/CVE/list
==================================================================---
data/CVE/list	2008-10-17 12:10:16 UTC (rev 10107)
+++ data/CVE/list	2008-10-17 12:24:05 UTC (rev 10108)
@@ -18,9 +18,11 @@
 CVE-2008-4581 (The Editor in IBM ENOVIA SmarTeam 5 before release 18 SP5, and
release ...)
 	NOT-FOR-US: IBM ENOVIA SmarTeam
 CVE-2008-4580 (fence_manual in fence allows local users to modify arbitrary
files via ...)
-	TODO: check
+	- redhat-cluster <unfixed> (low; bug #496410)
+	[etch] - redhat-cluster <no-dsa> (Minor issue)
 CVE-2008-4579 (The (1) fence_apc and (2) fence_apc_snmp programs, as used in
(a) ...)
-	TODO: check
+	- redhat-cluster <unfixed> (low; bug #496410)
+	[etch] - redhat-cluster <no-dsa> (Minor issue)
 CVE-2008-4578 (The ACL plugin in Dovecot before 1.1.4 allows attackers to
bypass ...)
 	TODO: check
 CVE-2008-4577 (The ACL plugin in Dovecot before 1.1.4 treats negative access
rights ...)
@@ -437,9 +439,6 @@
 CVE-2008-XXXX [bk2site: insecure temp file]
 	- bk2site <unfixed> (unimportant; bug #496430)
 	NOTE: Only debug code, script needs to be edited to exploit this
-CVE-2008-XXXX [cman: insecure temp file]
-	- redhat-cluster <unfixed> (low; bug #496410)
-	[etch] - redhat-cluster <no-dsa> (Minor issue)
 CVE-2008-XXXX [scilab: insecure temp file]
 	- scilab 4.1.2-6 (low; bug #496414)
 	[etch] - scilab <no-dsa> (Non-free not supported)