[Secure-testing-commits] r2885 - data/CVE

[Stefan Fritsch]

Author: stef-guest
Date: 2005-11-28 20:47:46 +0000 (Mon, 28 Nov 2005)
New Revision: 2885

Modified:
   data/CVE/list
Log:
squid non-issue


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2005-11-28 08:57:38 UTC (rev 2884)
+++ data/CVE/list	2005-11-28 20:47:46 UTC (rev 2885)
@@ -3271,7 +3271,9 @@
 CVE-2004-2481 (MyProxy 6.58 allows remote authenticated users in the Users Tab to ...)
 	NOT-FOR-US: MyProxy
 CVE-2004-2480 (Squid Web Proxy Cache 2.3.STABLE5 allows remote attackers to bypass ...)
-	TODO: check
+	NOTE: could not reproduce this with squid 2.5, neither could the redhat guys
+	NOTE: see https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=166522
+	- squid 2.5
 CVE-2004-2479 (Squid Web Proxy Cache 2.5 might allow remote attackers to obtain ...)
 	- squid 2.5.8
 CVE-2004-2478 (Unspecified vulnerability in Jetty HTTP Server, which is included in ...)