Secure testing commits - May 2005 - r1143 - sarge-checks/CAN

Author: jmm-guest
Date: 2005-05-25 08:03:37 +0000 (Wed, 25 May 2005)
New Revision: 1143

Modified:
   sarge-checks/CAN/list
Log:
new issues: qpopper and net-snmp


Modified: sarge-checks/CAN/list
==================================================================---
sarge-checks/CAN/list	2005-05-25 07:11:45 UTC (rev 1142)
+++ sarge-checks/CAN/list	2005-05-25 08:03:37 UTC (rev 1143)
@@ -1,3 +1,5 @@
+CAN-2005-XXXX [Insecure tempfile handling in net-snmp''s fixproc]
+	- net-snmp (unfixed)
 CAN-2005-XXXX [Two DoS condition in ekg]
 	- ekg 1:1.5+20050411-3
 CAN-2005-XXXX [lcrash affected by libbfd integer overflows]
@@ -2010,10 +2012,12 @@
 CAN-2005-1153 (Firefox before 1.0.3 and Mozilla Suite before 1.7.7, when
blocking a ...)
 	- mozilla-firefox 1.0.3-1
 	- mozilla 1.7.7-1
-CAN-2005-1152
+CAN-2005-1152 [Qpopper can be forced to create group or world writable files]
 	NOTE: reserved
-CAN-2005-1151
+	- qpopper (unfixed)
+CAN-2005-1151 [Insufficient privilege drop in qpopper]
 	NOTE: reserved
+	- qpopper (unfixed)
 CAN-2005-1150 (Unknown vulnerability in Sun Java System Web Server 6.0 SP7 and
...)
 	NOTE: not-for-us (Sun Java)
 CAN-2005-1149 (SQL injection vulnerability in admin/login.asp in aspclick.it
ACNews ...)