[Secure-testing-commits] r7387 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2007-11-24 22:47:28 +0000 (Sat, 24 Nov 2007)
New Revision: 7387

Modified:
   data/CVE/list
Log:
new issue: rails (CVE-2007-6077)


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-11-24 22:04:10 UTC (rev 7386)
+++ data/CVE/list	2007-11-24 22:47:28 UTC (rev 7387)
@@ -1,3 +1,5 @@
+CVE-2007-6077 [unauthorized disclosure of information]
+	- rails <unfixed> (low; bug #452748)
 CVE-2007-XXXX [multiple security issues in wireshark]
 	- wireshark <unfixed> (medium; bug #452381)
 CVE-2007-6038 (PHP remote file inclusion vulnerability in xajax_functions.php in the ...)
@@ -8,7 +10,7 @@
 	NOT-FOR-US: LIVE555 Media Server
 CVE-2007-6034 (ngIRCd before 0.10.3 allows remote attackers to cause a denial of ...)
 	- ngircd 0.10.3-1
-	[etch] - ngircd <no-dsa> (Minor issue) 
+	[etch] - ngircd <no-dsa> (Minor issue)
 CVE-2007-6033 (Invensys Wonderware InTouch 8.0 creates a NetDDE share with insecure ...)
 	NOT-FOR-US: Invensys Wonderware InTouch
 CVE-2007-6032 (SQL injection vulnerability in calendar/page.asp in Aleris Web ...)