Secure testing commits - Nov 2008 - r10484 - data/CVE

Author: alfie
Date: 2008-11-26 17:08:36 +0000 (Wed, 26 Nov 2008)
New Revision: 10484

Modified:
   data/CVE/list
Log:
vim CVEs noted down as mentioned by Michael Gilbert

Modified: data/CVE/list
==================================================================---
data/CVE/list	2008-11-25 21:14:10 UTC (rev 10483)
+++ data/CVE/list	2008-11-26 17:08:36 UTC (rev 10484)
@@ -5140,12 +5140,18 @@
 	- linux-2.6.24 <not-affected> (Vulnerable code added later)
 	[etch] - linux-2.6 <not-affected> (Vulnerable code added later)
 	NOTE: 1e9a615bfce7996ea4d815d45d364b47ac6a74e8
-CVE-2008-3076
+CVE-2008-3076 [arbitrary code execution through netrw.vim plugin]
 	RESERVED
-CVE-2008-3075
+	- vim 2:7.2.010-1 (bug #506919)
+	[lenny] - vim 1:71.314-3+lenny1 (bug #506919)
+CVE-2008-3075 [arbitrary code execution through zip.vim plugin]
 	RESERVED
-CVE-2008-3074
+	- vim 2:7.2.010-1 (bug #506919)
+	[lenny] - vim 1:71.314-3+lenny1 (bug #506919)
+CVE-2008-3074 [arbitrary code execution through tar.vim plugin]
 	RESERVED
+	- vim 2:7.2.010-1 (bug #506919)
+	[lenny] - vim 1:71.314-3+lenny1 (bug #506919)
 CVE-2008-3073 (Unspecified vulnerability in Simple Machines Forum (SMF) 1.1.x
before ...)
 	NOT-FOR-US: Simple Machines Forum
 CVE-2008-3072 (Simple Machines Forum (SMF) 1.1.x before 1.1.5 and 1.0.x before
...)