Author: fw
Date: 2007-06-27 12:38:20 +0000 (Wed, 27 Jun 2007)
New Revision: 6066
Modified:
data/CVE/list
Log:
CVE-2007-2798: krb5
Modified: data/CVE/list
==================================================================---
data/CVE/list 2007-06-27 11:17:58 UTC (rev 6065)
+++ data/CVE/list 2007-06-27 12:38:20 UTC (rev 6066)
@@ -1381,7 +1381,8 @@
RESERVED
CVE-2007-2833 (Emacs 21 allows user-assisted attackers to cause a denial of
service ...)
{DSA-1316-1}
- TODO: check
+ - emacs21 <unfixed> (bug #408929; low)
+ - emacs-snapshot <unfixed>
CVE-2007-2832 (Cross-site scripting (XSS) vulnerability in the web application
...)
NOT-FOR-US: Cisco
CVE-2007-2831 (Array index error in the (1) ieee80211_ioctl_getwmmparams and
(2) ...)
@@ -1454,7 +1455,7 @@
CVE-2007-2799 (Integer overflow in the "file" program 4.20,
when running on 32-bit ...)
- file 4.21-1 (medium)
CVE-2007-2798 (Stack-based buffer overflow in the rename_principal_2_svc
function in ...)
- TODO: check
+ - krb5 <unfixed> (high; bug #430785)
CVE-2006-7205 (The array_fill function in ext/standard/array.c in PHP 4.4.2 and
5.1.2 ...)
TODO: check
CVE-2006-7204 (The imap_body function in PHP before 4.4.4 does not implement
safemode ...)