[Secure-testing-commits] r7618 - data/CVE

[stef-guest at alioth.debian.org]

Author: stef-guest
Date: 2007-12-14 20:50:12 +0000 (Fri, 14 Dec 2007)
New Revision: 7618

Modified:
   data/CVE/list
Log:
another minor apache XXS

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-12-14 17:07:21 UTC (rev 7617)
+++ data/CVE/list	2007-12-14 20:50:12 UTC (rev 7618)
@@ -4023,8 +4023,14 @@
 	RESERVED
 CVE-2007-5001
 	RESERVED
-CVE-2007-5000
+CVE-2007-5000 [Apache mod_imap/mod_imagemap XSS]
 	RESERVED
+	[sarge] - apache2 <no-dsa> (minor issue)
+	[sarge] - apache <no-dsa> (minor issue)
+	[etch] - apache2 <no-dsa> (minor issue)
+	[etch] - apache <no-dsa> (minor issue)
+	- apache2 <unfixed> (low)
+	- apache <unfixed> (low)
 CVE-2007-4999 (libpurple in Pidgin 2.1.0 through 2.2.1, when using HTML logging, ...)
 	- pidgin 2.2.2-1 (medium)
 CVE-2007-4998
@@ -5287,7 +5293,7 @@
 CVE-2003-1334 (Cross-site scripting (XSS) vulnerability in Kai Blankenhorn Bitfolge ...)
 	NOT-FOR-US: snif
 CVE-2007-4465 (Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the ...)
-	- apache <unfixed>
+	- apache <unfixed> (low)
 	- apache2 2.2.6-1 (bug #453783)
 	[sarge] - apache <no-dsa> (browser issue, low impact)
 	[etch] - apache <no-dsa> (browser issue, low impact)