[Secure-testing-commits] r6330 - data/CVE

[thijs at alioth.debian.org]

Author: thijs
Date: 2007-08-15 22:36:38 +0000 (Wed, 15 Aug 2007)
New Revision: 6330

Modified:
   data/CVE/list
Log:
Mark CVE-2007-2589 as addressed in DSA-1290. This CVE id was
not included in the DSA, but was later assigned to a part of
the vulnerability.


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-08-15 21:14:07 UTC (rev 6329)
+++ data/CVE/list	2007-08-15 22:36:38 UTC (rev 6330)
@@ -4020,7 +4020,10 @@
 CVE-2007-2590 (Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, ...)
 	NOT-FOR-US: Nokia
 CVE-2007-2589 (Cross-site request forgery (CSRF) vulnerability in compose.php in ...)
+	{DSA-1290-1}
 	- squirrelmail 2:1.4.10a-1 (low)
+	NOTE: This has been addressed in DSA-1290
+	NOTE: CVE id has later been assigned to a part of this issue
 CVE-2003-1327 (Buffer overflow in the SockPrintf function in wu-ftpd 2.6.2 and ...)
 	- wu-ftpd 2.6.2-26 (unimportant; bug #425162)
 	NOTE: Linux' limit is 4096 chars