>Number:         22946
>Category:       pkg
>Synopsis:       cfengine<2.0.8 addition to pkg-vulnerabilities
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    pkg-manager
>State:          open
>Class:          change-request
>Submitter-Id:   net
>Arrival-Date:   Thu Sep 25 17:56:00 UTC 2003
>Closed-Date:
>Last-Modified:
>Originator:     Michael Santos
>Release:        NetBSD 1.6ZC
>Organization:
	
>Environment:
	
	
System: NetBSD ack-n 1.6ZC NetBSD 1.6ZC (ack-n) #13: Wed Sep 24 10:48:27 EDT 2003 root@ack-n:/home/build/src/sys/arch/i386/compile/obj/ack-n i386
Architecture: i386
Machine: i386
>Description:
Please update the pkg-vulnerabilities list from the audit-packages package to include cfengine < 2.0.8

See: http://www.securityfocus.com/archive/1/339083/2003-09-22/2003-09-28/0

>How-To-Repeat:
	
>Fix:
cfengine<2.0.8	remote-code-execution	http://www.securityfocus.com/archive/1/339083/2003-09-22/2003-09-28/0
>Release-Note:
>Audit-Trail:
>Unformatted: