neilm at alioth.debian.org
2007-Jul-24 09:18 UTC
[Secure-testing-commits] r6159 - data/CVE
Author: neilm Date: 2007-07-24 09:18:18 +0000 (Tue, 24 Jul 2007) New Revision: 6159 Modified: data/CVE/list Log: Added fixed versions for smb4k/CVE-2007-0474; smb4k/CVE-2007-0475 Modified: data/CVE/list ==================================================================--- data/CVE/list 2007-07-24 08:50:55 UTC (rev 6158) +++ data/CVE/list 2007-07-24 09:18:18 UTC (rev 6159) @@ -8269,10 +8269,10 @@ CVE-2007-0476 (The gencert.sh script, when installing OpenLDAP before 2.1.30-r10, ...) - openldap2 <not-affected> (Gentoo packaging bug) CVE-2007-0475 (Multiple stack-based buffer overflows in utilities/smb4k_*.cpp in ...) - - smb4k <unfixed> (low) + - smb4k 0.8.1-1 (low) NOTE: not all problems fixed in 0.8.0 CVE-2007-0474 (Smb4K before 0.8.0 allow local users, when present on the Smb4K ...) - - smb4k <unfixed> (low) + - smb4k 0.8.1-1 (low) NOTE: not fixed in 0.8.0, see NOTE: http://developer.berlios.de/bugs/?func=detailbug&bug_id=9631&group_id=769 CVE-2007-0473 (The writeFile function in core/smb4kfileio.cpp in Smb4K before 0.8.0 ...)