[Secure-testing-commits] r6303 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2007-08-14 15:46:01 +0000 (Tue, 14 Aug 2007)
New Revision: 6303

Modified:
   data/CVE/list
Log:
pure-ftpd-mysql fixed (low)

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-08-14 15:06:46 UTC (rev 6302)
+++ data/CVE/list	2007-08-14 15:46:01 UTC (rev 6303)
@@ -7772,7 +7772,8 @@
 	NOTE: Doesn't affect a standard Debian installation, only users, which install
 	NOTE: proprietary apps, it should be fixed for sanity, but not a direct vulnerability
 CVE-2006-XXXX [pure-ftpd-mysql: any problems with a home dir will allow rw to the entire filesystem]
-	- pure-ftpd <unfixed> (bug #350889)
+	- pure-ftpd-mysql 1.0.21-1 (low)
+	NOTE: oldstable is affected
 CVE-2007-XXXX [MediaWiki XSS based on Microsoft Internet Explorer's UTF-7 charset autodetection]
 	- mediawiki1.7 1.7.1-9 (low)
 CVE-2007-1049 (Cross-site scripting (XSS) vulnerability in the wp_explain_nonce ...)