Author: jmm-guest
Date: 2010-03-22 22:56:11 +0000 (Mon, 22 Mar 2010)
New Revision: 14316
Modified:
data/CVE/list
Log:
gnudip CVEfied
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2010-03-22 12:11:22 UTC (rev 14315)
+++ data/CVE/list 2010-03-22 22:56:11 UTC (rev 14316)
@@ -69,7 +69,7 @@
CVE-2009-4721 (Multiple SQL injection vulnerabilities in Admin/index.asp in
...)
NOT-FOR-US: Andrews-Web BannerAd
CVE-2009-4720 (SQL injection vulnerability in cgi-bin/gnudip.cgi in GnuDIP
2.1.1 ...)
- - gnudip <removed>
+ - gnudip <removed> (medium; bug #539452)
CVE-2009-4719 (SQL injection vulnerability in index.php in Discloser 0.0.4 rc2
allows ...)
NOT-FOR-US: Discloser
CVE-2010-XXXX [dojo can be used as a redirector]
@@ -8733,9 +8733,6 @@
CVE-2009-XXXX [apache2: only first 8 characters used to validate password]
- apache2 <unfixed> (unimportant; bug #539246)
NOTE: Standard behaviour of crypt, enhancement bug for stronger method
-CVE-2009-XXXX [gnudips: remote privilege escalation]
- - gnudip <removed> (medium; bug #539452)
- TODO: request CVE id
CVE-2009-XXXX [xscreensaver: local screen lock bypassable via low resolution
video devices]
- xscreensaver 5.05-3+nmu1 (low; bug #539699)
TODO: request CVE id
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/mailman/listinfo/secure-testing-commits
