Author: fw
Date: 2006-01-20 20:37:19 +0000 (Fri, 20 Jan 2006)
New Revision: 3330

Modified:
   data/CVE/list
Log:
CVE-2006-0250: our SNMP implementation is not affected


Modified: data/CVE/list
===================================================================
--- data/CVE/list       2006-01-20 19:59:32 UTC (rev 3329)
+++ data/CVE/list       2006-01-20 20:37:19 UTC (rev 3330)
@@ -143,7 +143,9 @@
 CVE-2006-0251 (Cross-site scripting (XSS) vulnerability in fom.cgi in 
Faq-O-Matic ...)
        TODO: check
 CVE-2006-0250 (Format string vulnerability in the snmp_input function in 
snmptrapd in ...)
-       TODO: check
+       NOT-FOR-US: cmu-snmp-linux fork from CMU SNMP
+       NOTE: This bug is present in a fork, not in the mainline
+       NOTE: CMU-SNMP/UCD-SNMP/NET-SNMP versions.
 CVE-2006-0249 (SQL injection vulnerability in viewcat.php in BitDamaged 
geoBlog ...)
        TODO: check
 CVE-2006-0248 (Virata-EmWeb web server 6_1_0, as used in (1) Intracom JetSpeed 
500 ...)


_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/mailman/listinfo/secure-testing-commits

Reply via email to