[Secure-testing-commits] r5939 - data/CVE

[stef-guest at alioth.debian.org]

Author: stef-guest
Date: 2007-05-26 12:11:31 +0000 (Sat, 26 May 2007)
New Revision: 5939

Modified:
   data/CVE/list
Log:
mutt bugnum, sitebar unimportant

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-05-26 11:34:34 UTC (rev 5938)
+++ data/CVE/list	2007-05-26 12:11:31 UTC (rev 5939)
@@ -259,7 +259,7 @@
 CVE-2007-2684 (Jetbox CMS 2.1 allows remote attackers to obtain sensitive information ...)
 	TODO: check
 CVE-2007-2683 (Buffer overflow in Mutt 1.4.2 might allow local users to execute ...)
-	- mutt <unfixed> (low)
+	- mutt <unfixed> (low; bug #426116)
 CVE-2007-2682 (The installer for Adobe Version Cue CS3 Server on Apple Mac OS X, as ...)
 	NOT-FOR-US: Adobe
 CVE-2007-2681 (Directory traversal vulnerability in blogs/index.php in b2evolution ...)
@@ -1561,7 +1561,8 @@
 CVE-2007-2089 (Multiple PHP remote file inclusion vulnerabilities in the Jx ...)
 	NOT-FOR-US: Jx Development Article component for Mambo and Joomla
 CVE-2007-2088 (Multiple PHP remote file inclusion vulnerabilities in Sitebar 3.3.5 ...)
-	- sitebar <unfixed>
+	- sitebar 3.3.8-7 (unimportant)
+	NOTE: this was register globals only and is fixed in Debian anyway
 CVE-2007-2087 (Multiple PHP remote file inclusion vulnerabilities in CNStats 2.12, ...)
 	NOT-FOR-US: CNStats
 CVE-2007-2086 (Multiple PHP remote file inclusion vulnerabilities in CNStats 2.9 ...)