[Secure-testing-commits] r4089 - data/CVE

[SALVETTI Djoumé]

Author: djoume-guest
Date: 2006-05-28 20:28:21 +0000 (Sun, 28 May 2006)
New Revision: 4089

Modified:
   data/CVE/list
Log:
cyrus-imapd-2.3 not in Debian

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-05-28 17:13:59 UTC (rev 4088)
+++ data/CVE/list	2006-05-28 20:28:21 UTC (rev 4089)
@@ -228,7 +228,8 @@
 CVE-2006-2503 (SQL injection vulnerability in misc.php in DeluxeBB 1.06 allows remote ...)
 	NOT-FOR-US: DeluxeBB
 CVE-2006-2502 (Stack-based buffer overflow in pop3d in Cyrus IMAPD (cyrus-imapd) ...)
-	TODO: check
+	NOT-FOR-US: cyrus-imapd-2.3 not in Debian
+	NOTE: cyrus-imapd-2.2 is in Debian but not vulnerable to this exploit.
 CVE-2006-2501 (Cross-site scripting (XSS) vulnerability in Sun ONE Web Server 6.0 SP9 ...)
 	NOT-FOR-US: Sun
 CVE-2006-2500 (Cross-site scripting (XSS) vulnerability in add_news.asp in ...)