Moritz Muehlenhoff
2005-Jun-09 09:01 UTC
[Secure-testing-commits] r1212 - sarge-checks/CAN
Author: jmm-guest Date: 2005-06-09 09:01:32 +0000 (Thu, 09 Jun 2005) New Revision: 1212 Modified: sarge-checks/CAN/list Log: new leafnode dos gedit fixed Modified: sarge-checks/CAN/list ==================================================================--- sarge-checks/CAN/list 2005-06-08 21:23:29 UTC (rev 1211) +++ sarge-checks/CAN/list 2005-06-09 09:01:32 UTC (rev 1212) @@ -1,3 +1,5 @@ +CAN-2005-XXXX [Minor DoS through malicous NNTP servers in leafnode''s fetchnews] + - leafnode 1.11.3.rel-1 CAN-2005-1863 NOTE: reserved CAN-2005-1862 @@ -467,8 +469,8 @@ NOTE: Removed from Sarge due to intransparent handling of security issues by upstream - wordpress 1.5.1-1 CAN-2005-1686 (Format string vulnerability in gedit 2.10.2 may allow attackers to ...) - TODO: Affects experimental, check whether 2.8 from Sarge/sid is affected as well - - gedit (unfixed) + NOTE: Only exploitable under rare circumstances + - gedit 2.10.3-1 CAN-2005-1685 (episodex guestbook allows remote attackers to bypass authentication ...) NOTE: not-for-us (episodex) CAN-2005-1684 (Cross-site scripting (XSS) vulnerability in default.asp for episodex ...)