[Secure-testing-commits] r4381 - data/CVE

[Alec Berryman]

Author: alec-guest
Date: 2006-07-12 23:18:14 +0000 (Wed, 12 Jul 2006)
New Revision: 4381

Modified:
   data/CVE/list
Log:
* CVE-2006-3379 (hiki): low, remote DoS
* CVE-2006-1150 (teg): fixed


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-07-12 23:08:44 UTC (rev 4380)
+++ data/CVE/list	2006-07-12 23:18:14 UTC (rev 4381)
@@ -298,7 +298,7 @@
 CVE-2006-3380 (Algorithmic complexity vulnerability in FreeStyle Wiki before 3.6.2 ...)
 	NOT-FOR-US: FreeStyle Wiki
 CVE-2006-3379 (Algorithmic complexity vulnerability in Hiki Wiki 0.6.0 through 0.6.5 ...)
-	TODO: check
+	- hiki <unfixed> (bug filed; low)
 CVE-2006-3378 (passwd command in shadow in Ubuntu 5.04 through 6.06 LTS, when called ...)
 	TODO: check
 CVE-2006-3377 (Cross-site scripting (XSS) vulnerability in JMB Software AutoRank PHP ...)
@@ -5541,7 +5541,7 @@
 CVE-2006-1151 (Cross-site scripting vulnerability in index.php in M-Phorum 0.2 allows ...)
 	NOT-FOR-US: M-Phorum
 CVE-2006-1150 (Buffer overflow in Tenes Empanadas Graciela (TEG) 0.11.1, ...)
-	- teg <unfixed> (bug #357645; low)
+	- teg 0.11.1-3 (bug #357645; low)
 CVE-2006-1149 (PHP remote file inclusion vulnerability in lib/OWL_API.php in OWL ...)
 	NOT-FOR-US: OWL Intranet Engine 
 CVE-2006-1148 (Multiple stack-based buffer overflows in the procConnectArgs function ...)