[Secure-testing-commits] r4679 - data/CVE

[Micah Anderson]

Author: micah
Date: 2006-09-04 23:00:48 +0000 (Mon, 04 Sep 2006)
New Revision: 4679

Modified:
   data/CVE/list
Log:
NFU on xbiff2 and a bugnum for phpgroupware


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-09-04 22:30:39 UTC (rev 4678)
+++ data/CVE/list	2006-09-04 23:00:48 UTC (rev 4679)
@@ -55,7 +55,8 @@
 CVE-2006-4494 (Microsoft Visual Studio 6.0 allows remote attackers to cause a denial ...)
 	NOT-FOR-US: Microsoft
 CVE-2006-4493 (xbiff2 1.9 creates $HOME/.xbiff2rc in a user's home directory with ...)
-	TODO: check
+	NOT-FOR-US: xbiff2
+	NOTE: xbase-clients contains xbiff, but it is not affected as it doesn't use a .xbiffrc
 CVE-2006-4492 (Unspecified vulnerability in Cybozu Office 6.5 Build 1.2 for Windows ...)
 	NOT-FOR-US: Cybozu Office
 CVE-2006-4491 (Directory traversal vulnerability in Cybozu Collaborex, AG before ...)
@@ -131,7 +132,7 @@
 CVE-2006-4459
 	RESERVED
 CVE-2006-4458 (Directory traversal vulnerability in ...)
-	TODO: check
+	- phpgroupware <unfixed> (bug #386061; medium)
 CVE-2006-4457 (PHP remote file inclusion vulnerability in index.php in phpECard 2.1.4 ...)
 	NOT-FOR-US: phpECard
 CVE-2006-4456 (PHP remote file inclusion vulnerability in functions.php in phpECard ...)