[Secure-testing-commits] r3498 - data/CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2006-02-16 09:33:53 +0000 (Thu, 16 Feb 2006)
New Revision: 3498

Modified:
   data/CVE/list
Log:
pyblosxom CVEfied


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-02-16 09:14:24 UTC (rev 3497)
+++ data/CVE/list	2006-02-16 09:33:53 UTC (rev 3498)
@@ -55,7 +55,7 @@
 CVE-2006-0708 (Multiple buffer overflows in NullSoft Winamp 5.13 and earlier allow ...)
 	TODO: check
 CVE-2006-0707 (PyBlosxom before 1.3.2, when running on certain webservers, allows ...)
-	TODO: check
+	- pyblosxom 1.3.2-1 (high)
 CVE-2006-0706 (Cross-site scripting vulnerability in eintrag.php in Gästebuch ...)
 	TODO: check
 CVE-2006-0705 (Format string vulnerability in a logging function as used by various ...)
@@ -156,7 +156,7 @@
 CVE-2006-0667
 	RESERVED
 CVE-2006-0666 (Unspecified vulnerability in the (1) unix_mp and (2) unix_64 kernels ...)
-	TODO: check
+	NOT-FOR-US: AIX
 CVE-2006-0665 (Unspecified vulnerability in (1) query_store.php and (2) ...)
 	- mantis 0.19.4-3
 	[woody] - mantis <not-affected> (Complete rewrite in 0.19)
@@ -218,8 +218,6 @@
 	[sarge] - imagemagick <not-affected> (Vulnerable code not present)
 CVE-2006-XXXX [dpkg-sig: insecure temp file bug]
 	- dpkg-sig <unfixed> (bug #352723; medium)
-CVE-2006-XXXX [pyblosxom remote file disclosure]
-	- pyblosxom 1.3.2-1 (high)
 CVE-2006-XXXX [Wordpress XSS]
 	- wordpress 2.0.1-1 (bug #328909)
 CVE-2006-XXXX [pioneers meta-server DoS]