[Secure-testing-commits] r4002 - data/CVE

[Alec Berryman]

Author: alec-guest
Date: 2006-05-20 13:20:47 +0000 (Sat, 20 May 2006)
New Revision: 4002

Modified:
   data/CVE/list
Log:
mp3info vuln (low)

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-05-20 13:18:27 UTC (rev 4001)
+++ data/CVE/list	2006-05-20 13:20:47 UTC (rev 4002)
@@ -55,7 +55,8 @@
 CVE-2006-2466 (BEA WebLogic Server 8.1 up to SP4 and 7.0 up to SP6 allows remote ...)
 	NOT-FOR-US: BEA
 CVE-2006-2465 (Buffer overflow in MP3Info 0.8.4 allows attackers to execute arbitrary ...)
-	TODO: check
+	NOTE: will file bug soon, poking around for a fix - alec
+	- mp3info <unfixed> (low)
 CVE-2006-2464 (stopWebLogic.sh in BEA WebLogic Server 8.1 before Service Pack 4 and ...)
 	NOT-FOR-US: BEA
 CVE-2006-2463 (view_album.php in SelectaPix 1.31 and earlier allows remote attackers ...)