[Secure-testing-commits] r1644 - data/CAN

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2005-08-25 13:22:07 +0000 (Thu, 25 Aug 2005)
New Revision: 1644

Modified:
   data/CAN/list
Log:
remove dupe
claim new


Modified: data/CAN/list
===================================================================
--- data/CAN/list	2005-08-25 04:41:13 UTC (rev 1643)
+++ data/CAN/list	2005-08-25 13:22:07 UTC (rev 1644)
@@ -597,6 +597,7 @@
 	NOTE: not-for-us (Clearswift MAILsweeper )
 CAN-2004-2327 (Vizer Web Server 1.9.1 allows remote attackers to cause a denial of ...)
 	NOTE: not-for-us (Vizer)
+begin claimed by jmm
 CAN-2004-2326 (SQL injection vulnerability in IP3 Networks NetAccess Appliance before ...)
 	TODO: check
 CAN-2004-2325 (Cross-site scripting (XSS) vulnerability in EditModule.aspx for ...)
@@ -623,6 +624,7 @@
 	TODO: check
 CAN-2004-2314 (The Telnet listener for Novell iChain Server before 2.2 Field Patch 3b ...)
 	TODO: check
+end claimed by jmm
 CAN-2004-2313 (Inter7 SqWebMail 3.4.1 through 3.6.1 generates different error ...)
 	TODO: check
 	NOTE: Did not find reference to fix in upstream changelog or any other hint that it is fixed
@@ -683,8 +685,6 @@
 CAN-2005-XXXX [centericq embeds libgadu, which had multiple vulns]
 	NOTE: Will be split once the maintainer has investigated this
 	- centericq (unfixed; bug #323185; medium)
-CAN-2005-XXXX [phpldapadmin doesn't fully prevent anonymous access when configured so]
-	- phpldapadmin 0.9.6c-5 (medium)
 CAN-2005-2546 (Arab Portal 2.0 allows remote attackers to obtain sensitive ...)
 	NOTE: not-for-us (Arab Portal)
 CAN-2005-2545 (Multiple cross-site scripting (XSS) vulnerabilities in PHPOpenChat ...)