[Secure-testing-commits] r7209 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2007-11-04 15:06:50 +0000 (Sun, 04 Nov 2007)
New Revision: 7209

Modified:
   data/CVE/list
Log:
CVE-2007-5461 tomcat5 in etch affected


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-11-04 14:53:14 UTC (rev 7208)
+++ data/CVE/list	2007-11-04 15:06:50 UTC (rev 7209)
@@ -1626,7 +1626,9 @@
 	- mailscanner 4.22.5-1
 CVE-2007-5461 (Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through ...)
 	- tomcat5.5 <unfixed> (low; bug #448664)
-	TODO: check tomcat5
+	[etch] - tomcat5 <unfixed>
+	NOTE: see http://mail-archives.apache.org/mod_mbox/tomcat-users/200710.mbox/%3C47135C2D.1000705@apache.org%3E
+	NOTE: for the patch
 CVE-2007-5391 (Unspecified vulnerability in HP Select Identity 4.01 through 4.01.010 ...)
 	NOT-FOR-US: HP Select Identity
 CVE-2007-5390 (PHP remote file inclusion vulnerability in index.php in PicoFlat CMS ...)