Author: nion
Date: 2011-10-06 20:19:22 +0000 (Thu, 06 Oct 2011)
New Revision: 17383
Modified:
data/CVE/list
data/DSA/list
Log:
DSA-2318-1 (cyrus-imapd-2.2)
Modified: data/CVE/list
==================================================================---
data/CVE/list 2011-10-06 15:58:01 UTC (rev 17382)
+++ data/CVE/list 2011-10-06 20:19:22 UTC (rev 17383)
@@ -1427,6 +1427,11 @@
RESERVED
CVE-2011-3372
RESERVED
+ - cyrus-imapd-2.2 2.4.11-1 (medium)
+ - cyrus-imapd-2.4 2.4.11-1 (medium)
+ - kolab-cyrus-imapd <unfixed> (medium)
+ TODO: file bug for kolab-cyrus-imapd
+ NOTE: medium because it allows to exploit CVE-2011-3208 unauthenticated
CVE-2011-3371 (Multiple cross-site scripting (XSS) vulnerabilities in ...)
TODO: check
CVE-2011-3370
@@ -1837,7 +1842,7 @@
CVE-2011-3209
RESERVED
CVE-2011-3208 (Stack-based buffer overflow in the split_wildmats function in
nntpd.c ...)
- - cyrus-imapd-2.2 <unfixed> (medium)
+ - cyrus-imapd-2.2 2.4.11-1 (medium)
- cyrus-imapd-2.4 2.4.11-1 (medium)
- kolab-cyrus-imapd <unfixed> (medium)
TODO: file bug for kolab-cyrus-imapd
Modified: data/DSA/list
==================================================================---
data/DSA/list 2011-10-06 15:58:01 UTC (rev 17382)
+++ data/DSA/list 2011-10-06 20:19:22 UTC (rev 17383)
@@ -1,3 +1,7 @@
+[06 Oct 2011] DSA-2318-1 cyrus-imapd-2.2 - several
+ {CVE-2011-3372 CVE-2011-3208}
+ [squeeze] - cyrus-imapd-2.2 2.2.13-19+squeeze2
+ [lenny] - cyrus-imapd-2.2 2.2.13-14+lenny5
[05 Oct 2011] DSA-2317-1 icedove - several
{CVE-2011-2372 CVE-2011-2995 CVE-2011-2998 CVE-2011-2999 CVE-2011-3000 }
[squeeze] - icedove 3.0.11-1+squeeze5