[Secure-testing-commits] r362 - sarge-checks/CAN

Joey Hess joeyh@costa.debian.org
Mon, 07 Feb 2005 19:05:14 +0100


Author: joeyh
Date: 2005-02-07 19:05:01 +0100 (Mon, 07 Feb 2005)
New Revision: 362

Modified:
   sarge-checks/CAN/list
Log:
php4 hole


Modified: sarge-checks/CAN/list
===================================================================
--- sarge-checks/CAN/list	2005-02-07 17:06:26 UTC (rev 361)
+++ sarge-checks/CAN/list	2005-02-07 18:05:01 UTC (rev 362)
@@ -105,7 +105,7 @@
 CAN-2005-0176
 	NOTE: reserved
 CAN-2004-1392 (PHP 4.0 with cURL functions allows remote attackers to bypass the ...)
-	TODO: check
+	- php4 (unfixed; bug filed)
 CAN-2004-1391 (Untrusted execution path vulnerability in the PPPoE daemon (PPPoEd) in ...)
 	NOTE: not-for-us (PPPoE daemon (PPPoEd) in QNX RTP)
 CAN-2004-1390 (Multiple buffer overflows in the PPPoE daemon (PPPoEd) in QNX RTP 6.1 ...)