[Secure-testing-commits] r2600 - data/CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2005-10-27 12:17:22 +0000 (Thu, 27 Oct 2005)
New Revision: 2600

Modified:
   data/CVE/list
Log:
bugnums


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2005-10-27 10:44:30 UTC (rev 2599)
+++ data/CVE/list	2005-10-27 12:17:22 UTC (rev 2600)
@@ -42,8 +42,8 @@
 CVE-2005-3320 (Cross-site scripting (XSS) vulnerability in SiteTurn Domain Manager ...)
 	NOT-FOR-US: SiteTurn Domain Manager
 CVE-2005-3319 (The apache2handler SAPI (sapi_apache2.c) in the Apache module ...)
-	- php4 <unfixed> (bug filed; low)
-	- php5 <unfixed> (bug filed; low)
+	- php4 <unfixed> (bug #336004; low)
+	- php5 <unfixed> (bug #336005; low)
 CVE-2005-3318 (Buffer overflow in the _chm_decompress_block function in CHM lib ...)
 	- chmlib <unfixed> (bug #335931; medium)
 CVE-2005-3317 (Multiple stack-based buffer overflows in ZipGenius 5.5.1.468 and ...)
@@ -96,7 +96,7 @@
 CVE-2004-2532 (Serv-U FTP server before 5.1.0.0 has a default account and password ...)
 	NOT-FOR-US: Serv-U FTP Server
 CVE-2004-2531 (X.509 Certificate Signature Verification in Gnu transport layer ...)
-	- gnutls11 <unfixed> (bug filed; low)
+	- gnutls11 <unfixed> (bug #336006; low)
 	TODO: Check, when this was fixed in gnutls12
 CVE-2004-2530 (Visual truncation vulnerability in Gadu-Gadu allows remote attackers ...)
 	TODO: check