[Secure-testing-commits] r7441 - data/CVE

[white at alioth.debian.org]

Author: white
Date: 2007-11-30 13:23:26 +0000 (Fri, 30 Nov 2007)
New Revision: 7441

Modified:
   data/CVE/list
Log:
Added note about clamav problem

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-11-30 12:23:31 UTC (rev 7440)
+++ data/CVE/list	2007-11-30 13:23:26 UTC (rev 7441)
@@ -233,8 +233,10 @@
 CVE-2007-6030 (Unspecified vulnerability in Weird Solutions BOOTPTurbo 1.2 has ...)
 	NOT-FOR-US: Weird Solutions BOOTPTurbo
 CVE-2007-6029 (Unspecified vulnerability in ClamAV 0.91.1 and 0.91.2 allows remote ...)
-	TODO: check
-	NOTE: this is an undisclosed vulnerability which is up for sale :/
+	NOTE: this information is based upon a vague advisory by a vulnerability
+	NOTE: information sales organization that does not coordinate with vendors or
+	NOTE: release actionable advisories. So maybe it is not fixed _but_ since it is
+	NOTE: not disclosed it would be hard to fix and track it.
 CVE-2007-6028 (Multiple stack-based buffer overflows in the VSFlexGrid.VSFlexGridL ...)
 	NOT-FOR-US: ComponentOne FlexGrid
 CVE-2007-6027 (PHP remote file inclusion vulnerability in admin.jjgallery.php in the ...)