[Secure-testing-commits] r6349 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2007-08-17 14:21:40 +0000 (Fri, 17 Aug 2007)
New Revision: 6349

Modified:
   data/CVE/list
Log:
update information for CVE-2007-3713

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-08-17 13:38:18 UTC (rev 6348)
+++ data/CVE/list	2007-08-17 14:21:40 UTC (rev 6349)
@@ -1430,7 +1430,10 @@
 CVE-2007-3714 (Directory traversal vulnerability in Ada Image Server (ImgSvr) 0.6.5 ...)
 	NOT-FOR-US: Ada Image Server
 CVE-2007-3713 (Multiple buffer overflows in Konst CenterICQ 4.9.11 through 4.21 allow ...)
-	TODO: check
+	- centericq <unfixed> (medium)
+	NOTE: I have some problems with filing a bug report for this, there is no information
+	NOTE: about the vulnerable files and a complete audit sounds a bit strange to me to fix
+	NOTE: this
 CVE-2007-3712 (Multiple cross-site scripting (XSS) vulnerabilities in HiddenChest &quot;is ...)
 	NOT-FOR-US: HiddenChest
 CVE-2007-3711 (Unspecified vulnerability in TOS 2.1.x, 2.2.x before 2.2.5, and 2.5.x ...)