[Secure-testing-commits] r3258 - data/CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2006-01-10 14:00:16 +0000 (Tue, 10 Jan 2006)
New Revision: 3258

Modified:
   data/CVE/list
Log:
new mod_auth_pgsql issue


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-01-10 00:48:10 UTC (rev 3257)
+++ data/CVE/list	2006-01-10 14:00:16 UTC (rev 3258)
@@ -2605,11 +2605,12 @@
 CVE-2005-3657 (The ActiveX control in MCINSCTL.DLL for McAfee VirusScan Security ...)
 	NOT-FOR-US: McAfee
 CVE-2005-3656 (Multiple format string vulnerabilities in mod_auth_pgsql before 2.0.3, ...)
-	TODO: check
+	- libapache2-mod-auth-pgsql <unfixed>
+	- libapache-mod-auth-pgsql <not-affected> (Does not contain the vulnerable ap_log_rerror() function)
 CVE-2005-3655
 	RESERVED
 CVE-2005-3654 (Blue Coat Systems Inc. WinProxy before 6.1a allows remote attackers to ...)
-	TODO: check
+	NOT-FOR-US: Blue Coat WinProxy
 CVE-2005-3653
 	RESERVED
 CVE-2005-3652 (Heap-based buffer overflow in Citrix Program Neighborhood client 9.0 ...)