[Secure-testing-commits] r6231 - data/CVE

[fw at alioth.debian.org]

Author: fw
Date: 2007-08-04 11:25:26 +0000 (Sat, 04 Aug 2007)
New Revision: 6231

Modified:
   data/CVE/list
Log:
CVE-2007-3632: moodle not affected


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-08-04 11:21:09 UTC (rev 6230)
+++ data/CVE/list	2007-08-04 11:25:26 UTC (rev 6231)
@@ -1044,7 +1044,8 @@
 CVE-2007-3633 (Absolute path traversal vulnerability in the Chilkat Software Chilkat ...)
 	NOT-FOR-US: Chilkat Software
 CVE-2007-3632 (Multiple PHP remote file inclusion vulnerabilities in LimeSurvey (aka ...)
-	TODO: check
+	NOTE: Moodle contains a copy of the files, but not the string
+	NOTE: "homedir", so it is not affected.
 CVE-2007-3631 (SQL injection vulnerability in index.php in GameSiteScript (gss) 3.1 ...)
 	TODO: check
 CVE-2007-3630 (changePW.php in AV Tutorial Script (avtutorial) 1.0 does not require ...)