[Secure-testing-commits] r6186 - data/CVE

[white at alioth.debian.org]

Author: white
Date: 2007-07-27 10:10:55 +0000 (Fri, 27 Jul 2007)
New Revision: 6186

Modified:
   data/CVE/list
Log:
* Add a NOTE for moodle

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-07-27 09:14:07 UTC (rev 6185)
+++ data/CVE/list	2007-07-27 10:10:55 UTC (rev 6186)
@@ -5998,7 +5998,10 @@
 CVE-2007-1430 (PHP remote file inclusion vulnerability in ...)
 	NOT-FOR-US: ClipShare
 CVE-2007-1429 (Multiple PHP remote file inclusion vulnerabilities in Moodle 1.7.1 ...)
-	- moodle <not-affected> (was unreproducible)
+	- moodle <not-affected>
+	NOTE: Security problem with the Windows version
+	NOTE: Debian Maintainer and Upstream state that debian is not affected
+	NOTE: and the problem is not reproducable there
 CVE-2007-1428 (SQL injection vulnerability in search.php in PHP Labs JobSitePro 1.0 ...)
 	NOT-FOR-US: JobSitePro
 CVE-2007-1427 (Directory traversal vulnerability in download_pdf.php in AssetMan 2.4a ...)