[Secure-testing-commits] r6574 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2007-09-11 15:24:04 +0000 (Tue, 11 Sep 2007)
New Revision: 6574

Modified:
   data/CVE/list
Log:
CVE-2007-4727 fixed in lighttpd 1.4.18-1


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-09-11 13:41:10 UTC (rev 6573)
+++ data/CVE/list	2007-09-11 15:24:04 UTC (rev 6574)
@@ -91,9 +91,10 @@
 	RESERVED
 CVE-2007-4727 [lighttpd: header overflow when using the mod_fastcgi extension]
 	RESERVED
-	- lighttpd <unfixed> (bug #441555)
+	- lighttpd 1.4.18-1 (medium; bug #441555)
 	NOTE: http://www.lighttpd.net/assets/2007/9/9/lighttpd_sa_2007_12.txt
 	NOTE: http://www.lighttpd.net/download/lighttpd-1.4.x_mod_fastcgi_overrun.patch
+	NOTE: http://www.milw0rm.com/exploits/4391
 CVE-2007-4726 (Directory traversal vulnerability in Web Oddity 0.09b allows remote ...)
 	NOT-FOR-US: Web Oddity
 CVE-2007-4725 (Stack consumption vulnerability in AkkyWareHOUSE 7-zip32.dll before ...)