[Secure-testing-commits] r6363 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2007-08-20 15:08:43 +0000 (Mon, 20 Aug 2007)
New Revision: 6363

Modified:
   data/CVE/list
Log:
CVE-2005-4830 fixed in 0.9.4+svn20060318-1

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-08-20 14:07:16 UTC (rev 6362)
+++ data/CVE/list	2007-08-20 15:08:43 UTC (rev 6363)
@@ -7597,7 +7597,9 @@
 CVE-2005-4831 (viewcvs in ViewCVS 0.9.2 allows remote attackers to set the ...)
 	- viewvc 0.9.4+svn20060318-1 (low)
 CVE-2005-4830 (CRLF injection vulnerability in viewcvs in ViewCVS 0.9.2 allows remote ...)
-	- viewcvs <unfixed> (low)
+	- viewcvs 0.9.4+svn20060318-1 (low)
+	NOTE: referring to http://www.securityfocus.com/archive/1/461427/100/0/threaded this
+	NOTE: has been fixed in cvs for 0.9.3
 CVE-2004-2680 (mod_python (libapache2-mod-python) 3.1.4 and earlier does not properly ...)
 	- libapache2-mod-python 3.2.8-1 (low)
 CVE-2007-1218 (Off-by-one buffer overflow in the parse_elements function in the ...)