[Secure-testing-commits] r3330 - data/CVE

[Florian Weimer]

Author: fw
Date: 2006-01-20 20:37:19 +0000 (Fri, 20 Jan 2006)
New Revision: 3330

Modified:
   data/CVE/list
Log:
CVE-2006-0250: our SNMP implementation is not affected


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-01-20 19:59:32 UTC (rev 3329)
+++ data/CVE/list	2006-01-20 20:37:19 UTC (rev 3330)
@@ -143,7 +143,9 @@
 CVE-2006-0251 (Cross-site scripting (XSS) vulnerability in fom.cgi in Faq-O-Matic ...)
 	TODO: check
 CVE-2006-0250 (Format string vulnerability in the snmp_input function in snmptrapd in ...)
-	TODO: check
+	NOT-FOR-US: cmu-snmp-linux fork from CMU SNMP
+	NOTE: This bug is present in a fork, not in the mainline
+	NOTE: CMU-SNMP/UCD-SNMP/NET-SNMP versions.
 CVE-2006-0249 (SQL injection vulnerability in viewcat.php in BitDamaged geoBlog ...)
 	TODO: check
 CVE-2006-0248 (Virata-EmWeb web server 6_1_0, as used in (1) Intracom JetSpeed 500 ...)