[Secure-testing-commits] r6677 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2007-09-23 12:53:59 +0000 (Sun, 23 Sep 2007)
New Revision: 6677

Modified:
   data/CVE/list
Log:
CVE-2007-3181 fixed in firebird2.0 2.0.3.12981.ds1-1


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-09-23 12:26:51 UTC (rev 6676)
+++ data/CVE/list	2007-09-23 12:53:59 UTC (rev 6677)
@@ -4214,9 +4214,11 @@
 CVE-2007-3182 (Multiple cross-site scripting (XSS) vulnerabilities in Calendarix ...)
 	NOT-FOR-US: Calendarix
 CVE-2007-3181 (Buffer overflow in fbserver.exe in Firebird SQL 2 before 2.0.1 allows ...)
-	- firebird2.0 <unfixed> (medium)
+	- firebird2.0 2.0.3.12981.ds1-1 (medium)
 	[etch] - firebird2 <unfixed> (medium)
 	[sarge] - firebird2 <unfixed> (medium)
+	NOTE: maybe fixed prior to 2.0.3.12981.ds1-1 (2.0.1) but couldn't find an source code in the pool
+	NOTE: and since this version is in testing and unstable...
 CVE-2007-3180 (Buffer overflow in Help and Support Center before 4.4 C on HP Windows ...)
 	NOT-FOR-US: HP
 CVE-2007-3179 (Multiple SQL injection vulnerabilities in archives.php in Particle ...)