[Secure-testing-commits] r4328 - data/CVE

Alec Berryman
Mon, 03 Jul 2006 01:00:43 -0000

Author: alec-guest
Date: 2006-07-03 01:00:06 +0000 (Mon, 03 Jul 2006)
New Revision: 4328

Modified:
   data/CVE/list
Log:
* CVE-2006-3251 (hashcash): fixed in testing/unstable, filed a report for the
sec team b/c version in sarge is vulnerable

Modified: data/CVE/list
==================================================================---
data/CVE/list	2006-07-03 00:24:39 UTC (rev 4327)
+++ data/CVE/list	2006-07-03 01:00:06 UTC (rev 4328)
@@ -122,7 +122,7 @@
 CVE-2006-3252 (Buffer overflow in the Online Registration Facility for
Algorithmic ...)
 	NOT-FOR-US: Algorithmic Research PrivateWire VPN
 CVE-2006-3251 (Heap-based buffer overflow in the array_push function in
hashcash.c ...)
-	TODO: check
+	- hashcash 1.21
 CVE-2006-3250 (Heap-based buffer overflow in Windows Live Messenger 8.0 allows
...)
 	TODO: check
 CVE-2006-3249 (SQL injection vulnerability in search.php in Phorum 5.1.14 and
earlier ...)