[Secure-testing-commits] r4221 - data/CVE

Micah Anderson
Thu, 15 Jun 2006 01:55:32 -0000

Author: micah
Date: 2006-06-15 01:54:31 +0000 (Thu, 15 Jun 2006)
New Revision: 4221

Modified:
   data/CVE/list
Log:
Added bugnum for abc2ps, added fixed versions for asterisk and bacula


Modified: data/CVE/list
==================================================================---
data/CVE/list	2006-06-15 01:47:22 UTC (rev 4220)
+++ data/CVE/list	2006-06-15 01:54:31 UTC (rev 4221)
@@ -3620,8 +3620,9 @@
 	[sarge] - abcmidi 20050101-1sarge1
 CVE-2006-1513 (Multiple buffer overflows in abc2ps before 1.3.3 allow
user-complicit ...)
 	{DSA-1041-1}
-	- abc2ps 1.3.3-3sarge1
+	- abc2ps <unfixed> (bug #373685; low)
 	[woody] - abc2ps 1.3.3-2woody1
+	[sarge] - abc2ps 1.3.3-3sarge1
 CVE-2006-1512
 	REJECTED
 CVE-2006-1511 (Buffer overflow in the ILASM assembler in the Microsoft .NET 1.0
and ...)
@@ -9852,7 +9853,7 @@
 	NOT-FOR-US: Zone Labs
 CVE-2005-3559 (Directory traversal vulnerability in vmail.cgi in Asterisk 1.0.9
...)
 	{DSA-1048-1}
-	- asterisk <unfixed> (bug #338116; medium)
+	- asterisk 1.2.7.1.dfsg (bug #338116; medium)
 	[sarge] - asterisk 1:1.0.7.dfsg.1-2sarge2 (bug #338116; medium)
 	[woody] - asterisk 0.1.11-3woody1 (bug #338116; medium)
 CVE-2005-3558 (PHP file inclusion vulnerability in index.php in OSTE 1.0 allows
...)
@@ -11786,7 +11787,7 @@
 CVE-2005-2996 (Multiple heap-based and stack-based buffer overflows in certain
DCOM ...)
 	NOT-FOR-US: VERITAS storage solutions
 CVE-2005-2995 (bacula 1.36.3 and earlier allows local users to modify or read
...)
-	- bacula (bug #329271; low)
+	- bacula 1.38.9-1 (bug #329271; low)
 	NOTE: Sarge affected, didn''t exist in Woody
 CVE-2005-2994 (Unspecified vulnerability in the web client for IBM Rational
...)
 	NOT-FOR-US: IBM Rational ClearQuest