Secure testing commits - Jan 2009 - r10979 - data/CVE

Author: nion
Date: 2009-01-17 16:46:46 +0000 (Sat, 17 Jan 2009)
New Revision: 10979

Modified:
   data/CVE/list
Log:
cveified xrdp

Modified: data/CVE/list
==================================================================---
data/CVE/list	2009-01-17 16:24:36 UTC (rev 10978)
+++ data/CVE/list	2009-01-17 16:46:46 UTC (rev 10979)
@@ -28,12 +28,6 @@
 	TODO: check
 CVE-2008-5905 (The web interface plugin in KTorrent before 3.1.4 allows remote
...)
 	TODO: check
-CVE-2008-5904 (The rdp_rdp_process_color_pointer_pdu function in rdp/rdp_rdp.c
in ...)
-	TODO: check
-CVE-2008-5903 (Array index error in the xrdp_bitmap_def_proc function in
xrdp/funcs.c ...)
-	TODO: check
-CVE-2008-5902 (Buffer overflow in the xrdp_bitmap_invalidate function in ...)
-	TODO: check
 CVE-2009-XXXX [unspecified multiple Drupal vulnerabilies, likely some overlap
with the next temp entry]
 	- drupal6 6.6-3
 CVE-2009-XXXX [unspecified Drupal SQL injection]
@@ -96,8 +90,12 @@
 	NOT-FOR-US: AyeView
 CVE-2008-5883 (Absolute path traversal vulnerability in front-end/dir.php in
mini-pub ...)
 	NOT-FOR-US: mini-pub
-CVE-2009-XXXX [xrdp: multiple vulnerabilities]
+CVE-2008-5904 (The rdp_rdp_process_color_pointer_pdu function in rdp/rdp_rdp.c
in ...)
 	- xrdp <unfixed> (bug #511641)
+CVE-2008-5903 (Array index error in the xrdp_bitmap_def_proc function in
xrdp/funcs.c ...)
+	- xrdp <unfixed> (bug #511641)
+CVE-2008-5902 (Buffer overflow in the xrdp_bitmap_invalidate function in ...)
+	- xrdp <unfixed> (bug #511641)
 CVE-2009-XXXX [amaya: stack based buffer overflow]
 	- amaya <unfixed> (medium; bug #507587)
 	NOTE: different vector than described in CVE-2008-5282, see 507587#15