Secure testing commits - May 2005 - r1159 - sarge-checks/CAN

Author: jmm-guest
Date: 2005-05-25 23:13:49 +0000 (Wed, 25 May 2005)
New Revision: 1159

Modified:
   sarge-checks/CAN/list
Log:
mailutils CANified.


Modified: sarge-checks/CAN/list
==================================================================---
sarge-checks/CAN/list	2005-05-25 23:13:11 UTC (rev 1158)
+++ sarge-checks/CAN/list	2005-05-25 23:13:49 UTC (rev 1159)
@@ -281,8 +281,6 @@
 	- lcrash 7.0.0.pre.cvs.20050322-3
 CAN-2005-XXXX [Multiple security problems in lbreakout2]
 	- lbreakout2 2.5.2-2
-CAN-2005-XXXX [mailutils multiple vulnerabilities]
-	- mailutils 1:0.6.1-3
 CAN-2005-1653 (Cross-site scripting (XSS) vulnerability in message.htm for
Woppoware ...)
 	NOTE: not-for-us (Woppoware)
 CAN-2005-1652 (message.htm for Woppoware PostMaster 4.2.2 (build 3.2.5) allows
remote ...)
@@ -560,14 +558,18 @@
 	NOTE: reserved
 CAN-2005-1524
 	NOTE: reserved
-CAN-2005-1523
+CAN-2005-1523 [GNU Mailutils 0.6 imap4d Format String Vulnerability]
 	NOTE: reserved
-CAN-2005-1522
+	- mailutils 1:0.6.1-3
+CAN-2005-1522 [GNU Mailutils 0.6 imap4d FETCH Command Resource Consumption DoS
Vulnerability]
 	NOTE: reserved
-CAN-2005-1521
+	- mailutils 1:0.6.1-3
+CAN-2005-1521 [GNU Mailutils 0.6 imap4d fetch_io Heap overflow Vulnerability]
 	NOTE: reserved
-CAN-2005-1520
+	- mailutils 1:0.6.1-3
+CAN-2005-1520 [GNU Mailutils 0.6 mail header_get_field_name() Buffer Overflow
Vulnerability]
 	NOTE: reserved
+	- mailutils 1:0.6.1-3
 CAN-2005-1519 (Squid 2.5 STABLE9 and earlier, when the DNS client port is
unfiltered ...)
 	- squid 2.5.9-9
 CAN-2005-1518 (Unknown vulnerability in Solaris 7 through 9, when using
Federated ...)