[Secure-testing-commits] r5888 - data/CVE

[stef-guest at alioth.debian.org]

Author: stef-guest
Date: 2007-05-20 18:39:42 +0000 (Sun, 20 May 2007)
New Revision: 5888

Modified:
   data/CVE/list
Log:
trac bugnums

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-05-20 15:18:36 UTC (rev 5887)
+++ data/CVE/list	2007-05-20 18:39:42 UTC (rev 5888)
@@ -2985,9 +2985,9 @@
 CVE-2007-1407 (Unspecified vulnerability in OpenSolution Quick.Cart before 2.1 has ...)
 	NOT-FOR-US: Quick.Cart
 CVE-2007-1406 (Trac before 0.10.3.1 does not send a Content-Disposition HTTP header ...)
-	- trac <unfixed> (low)
+	- trac <unfixed> (low; bug #414134; bug #420219)
 CVE-2007-1405 (Cross-site scripting (XSS) vulnerability in the &quot;download wiki page as ...)
-	- trac <unfixed> (low)
+	- trac <unfixed> (low; bug #414134; bug #420219)
 CVE-2007-1404 (tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 allows remote ...)
 	NOT-FOR-US: ProSysInfo TFTP Server
 CVE-2007-1403 (Multiple stack-based buffer overflows in an ActiveX control in ...)