[Secure-testing-commits] r3992 - data/CVE

[Alec Berryman]

Author: alec-guest
Date: 2006-05-20 06:57:23 +0000 (Sat, 20 May 2006)
New Revision: 3992

Modified:
   data/CVE/list
Log:
* Dovecot issue was assigned a CVE
* New GNUnet issue; bug filed


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-05-20 06:55:25 UTC (rev 3991)
+++ data/CVE/list	2006-05-20 06:57:23 UTC (rev 3992)
@@ -82,9 +82,10 @@
 CVE-2006-2415 (Multiple cross-site scripting (XSS) vulnerabilities in FlexChat 2.0 ...)
 	NOT-FOR-US: FlexChat
 CVE-2006-2414 (Directory traversal vulnerability in Dovecot 1.0 beta and 1.0 allows ...)
-	TODO: check
+	- dovecot 1.0.beta8-1 (low)
+	[sarge] - dovecot <not-affected> (vulnerability introduced in 1.0)
 CVE-2006-2413 (GNUnet before SVN revision 2781 allows remote attackers to cause a ...)
-	TODO: check
+	- gnunet <unfixed> (bug 368159; medium)
 CVE-2006-2412 (The raydium_network_read function in network.c in Raydium SVN revision ...)
 	TODO: check
 CVE-2006-2411 (Buffer overflow in raydium_network_read function in network.c in ...)
@@ -246,9 +247,6 @@
 	NOT-FOR-US: ManageEngine OpManager
 CVE-2006-2342 (IBM WebSphere Application Server 6.0.2 before FixPack 3 allows remote ...)
 	NOT-FOR-US: IBM WebSphere Application Server
-CVE-2006-XXXX [dovecot information disclosure: list .. directory]
-	- dovecot 1.0.beta8-1 (low)
-	[sarge] - dovecot <not-affected> (vulnerability introduced in 1.0)
 CVE-2006-2341 (The HTTP proxy in Symantec Gateway Security 5000 Series 2.0.1 and 3.0, ...)
 	NOT-FOR-US: Symantec Gateway Security
 CVE-2006-2340 (Cross-site scripting (XSS) vulnerability in PassMasterFlex and ...)