[Secure-testing-commits] r6004 - data/CVE

[fw at alioth.debian.org]

Author: fw
Date: 2007-06-16 09:23:56 +0000 (Sat, 16 Jun 2007)
New Revision: 6004

Modified:
   data/CVE/list
Log:
CVE-2007-3215: libphp-phpmailer and copies


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-06-16 08:14:50 UTC (rev 6003)
+++ data/CVE/list	2007-06-16 09:23:56 UTC (rev 6004)
@@ -61,7 +61,14 @@
 CVE-2007-3216 (Multiple unspecified vulnerabilities in the server component of CA ...)
 	NOT-FOR-US: CA BrightStor products
 CVE-2007-3215 (PHPMailer 1.7, when configured to use sendmail, allows remote ...)
-	TODO: check
+	- libphp-phpmailer <unfixed> (high; bug #429179)
+	- flyspray <unfixed> (bug #429191; bug #429195)
+	- moodle <unfixed> (bug #429190)
+	- owl-dms <unfixed> (bug #429197)
+	- knowledgeroot <unfixed> (bug #429196)
+	- ipplan <unfixed> (bug #429193)
+	- glpi <unfixed> (bug #429192)
+	- wordpress <unfixed> (bug #429194)
 CVE-2007-3214 (SQL injection vulnerability in style.php in e-Vision CMS 2.02 and ...)
 	TODO: check
 CVE-2007-3213 (Multiple cross-site scripting (XSS) vulnerabilities in comments.cgi in ...)