Author: fgeek-guest
Date: 2014-05-30 09:04:30 +0000 (Fri, 30 May 2014)
New Revision: 27066

Modified:
   data/CVE/list
Log:
CVE-2013-4159, CVE-2013-6433

Modified: data/CVE/list
===================================================================
--- data/CVE/list       2014-05-30 08:53:18 UTC (rev 27065)
+++ data/CVE/list       2014-05-30 09:04:30 UTC (rev 27066)
@@ -11597,8 +11597,11 @@
        RESERVED
 CVE-2013-6434 (The remote-viewer in Red Hat Enterprise Virtualization Manager 
...)
        NOT-FOR-US: RHEV Manager
-CVE-2013-6433
+CVE-2013-6433 [rootwrap sudo config allows potential privilege escalation]
        RESERVED
+       - quantum <unfixed>
+       - neutron <unfixed>
+       TODO: check
 CVE-2013-6432 (The ping_recvmsg function in net/ipv4/ping.c in the Linux 
kernel ...)
        - linux 3.12.6-1
        [wheezy] - linux <not-affected> (Vulnerable code introduced in 3.11)
@@ -17589,8 +17592,9 @@
        [wheezy] - lcms2 2.2+git20110628-2.2+deb7u1
        NOTE: 
https://github.com/mm2/Little-CMS/commit/91c2db7f2559be504211b283bc3a2c631d6f06d9
        NOTE: https://bugzilla.novell.com/show_bug.cgi?id=826097#c9
-CVE-2013-4159
+CVE-2013-4159 [temporary file vulnerabilities]
        RESERVED
+       - ctdb <unfixed> (bug #749840)
 CVE-2013-4158
        RESERVED
        - smokeping <not-affected> (fix for CVE-2012-0790/DSA-2651-1 uses 
regexp from 2.6.9 upstream release)


_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

Reply via email to