[Secure-testing-commits] r3291 - data/CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2006-01-13 11:22:19 +0000 (Fri, 13 Jan 2006)
New Revision: 3291

Modified:
   data/CVE/list
Log:
new PHP5 issues


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-01-13 11:09:38 UTC (rev 3290)
+++ data/CVE/list	2006-01-13 11:22:19 UTC (rev 3291)
@@ -1,3 +1,9 @@
+CVE-2006-XXXX [php5 response splitting]
+	- php5 <unfixed> (bug filed)
+	- php4 <not-affected> (vulnerable code was introduced in PHP5)
+CVE-2006-XXXX [php5 mysqli format string issue]
+	- php5 <unfixed> (bug filed)
+	- php4 <not-affected> (vulnerable code was introduced in PHP5)
 CVE-2006-0187 (By design, Microsoft Visual Studio 2005 automatically executes code in ...)
 	NOT-FOR-US: Microsoft
 CVE-2006-0186 (Multiple SQL injection vulnerabilities in MusicBox 2.3 and earlier ...)