[Secure-testing-commits] r5170 - data/CVE

Florian Weimer fw at alioth.debian.org
Mon Dec 25 11:15:38 CET 2006


Author: fw
Date: 2006-12-25 11:15:36 +0100 (Mon, 25 Dec 2006)
New Revision: 5170

Modified:
   data/CVE/list
Log:
some torrentflux issues have been fixed


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-12-25 10:02:26 UTC (rev 5169)
+++ data/CVE/list	2006-12-25 10:15:36 UTC (rev 5170)
@@ -219,7 +219,7 @@
 CVE-2006-6605 (Stack-based buffer overflow in the POP service in MailEnable Standard ...)
 	NOT-FOR-US: MailEnable
 CVE-2006-6604 (Directory traversal vulnerability in downloaddetails.php in ...)
-	TODO: check
+	- torrentflux 2.1-7 (medium; bug #400582)
 CVE-2006-6603 (Buffer overflow in the YMMAPI.YMailAttach ActiveX control (ymmapi.dll) ...)
 	NOT-FOR-US: YMMAPI.YMailAttach
 CVE-2006-6602 (explorer.exe in Windows Explorer 6.00.2900.2180 in Microsoft Windows ...)
@@ -227,9 +227,9 @@
 CVE-2006-6601 (Windows Media Player 10.00.00.4036 in Microsoft Windows XP SP2 allows ...)
 	NOT-FOR-US: Microsoft
 CVE-2006-6600 (Cross-site scripting (XSS) vulnerability in dir.php in TorrentFlux ...)
-	TODO: check
+	- torrentflux 2.1-7 (medium; bug #400582)
 CVE-2006-6599 (maketorrent.php in TorrentFlux 2.2 allows remote authenticated users ...)
-	TODO: check
+	- torrentflux 2.1-7 (medium; bug #400582)
 CVE-2006-6598 (Directory traversal vulnerability in viewnfo.php in (1) TorrentFlux ...)
 	- torrentflux 2.1-6
 CVE-2006-6597 (Argument injection vulnerability in HyperAccess 8.4 allows ...)




More information about the Secure-testing-commits mailing list