[Secure-testing-commits] r7048 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2007-10-21 12:14:04 +0000 (Sun, 21 Oct 2007)
New Revision: 7048

Modified:
   data/CVE/list
Log:
CVE-2007-5461 does not affect tomcat 5.x


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-10-21 11:34:13 UTC (rev 7047)
+++ data/CVE/list	2007-10-21 12:14:04 UTC (rev 7048)
@@ -668,7 +668,8 @@
 CVE-2002-2228 (MailScanner before 4.0 5-1 and before 3.2 6-1 allows remote attackers ...)
 	- mailscanner 4.22.5-1
 CVE-2007-5461 (Absolute path traversal vulnerability in Apache Tomcat, under certain ...)
-	TODO: check
+	- tomcat5.5 <not-affected> (Tomcat 6.x specific vulnerability referring to upstream)
+	- tomcat5 <removed>
 CVE-2007-5391 (Unspecified vulnerability in HP Select Identity 4.01 through 4.01.010 ...)
 	NOT-FOR-US: HP Select Identity
 CVE-2007-5390 (PHP remote file inclusion vulnerability in index.php in PicoFlat CMS ...)