[Secure-testing-commits] r11887 - data/CVE

Nico Golde
Wed, 13 May 2009 10:56:11 -0000

Author: nion
Date: 2009-05-13 10:56:11 +0000 (Wed, 13 May 2009)
New Revision: 11887

Modified:
   data/CVE/list
Log:
cveified ubuntu specific clamav issue

Modified: data/CVE/list
==================================================================---
data/CVE/list	2009-05-13 08:26:30 UTC (rev 11886)
+++ data/CVE/list	2009-05-13 10:56:11 UTC (rev 11887)
@@ -32,7 +32,8 @@
 CVE-2009-1602 (Pablo Software Solutions Quick ''n Easy Mail Server 3.3
allows remote ...)
 	NOT-FOR-US: Pablo Software
 CVE-2009-1601 (The Ubuntu clamav-milter.init script in clamav-milter before
...)
-	TODO: check
+	- clamav <not-affected> (Vulnerable code not present)
+	NOTE: from what I see this code was never uploaded to the debian archive
 CVE-2009-1600 (Apple Safari executes DOM calls in response to a javascript: URI
in ...)
 	NOT-FOR-US: Apple Safari
 CVE-2009-1599 (Opera executes DOM calls in response to a javascript: URI in the
...)
@@ -280,10 +281,6 @@
 	[etch] - xorg-server <no-dsa> (minor issue)
 	[lenny] - xorg-server <no-dsa> (minor issue)
 	NOTE: CVE id requested
-CVE-2009-XXXX [clamav milter init script "typo"]
-	- clamav <not-affected> (Vulnerable code not present)
-	NOTE: from what I see this code was never uploaded to the debian archive
-	NOTE: CVE id requested on oss-sec
 CVE-2009-1515 (Heap-based buffer overflow in the cdf_read_sat function in
src/cdf.c ...)
 	- file 5.02-1