[Secure-testing-commits] r8022 - data/CVE

[thijs at alioth.debian.org]

Author: thijs
Date: 2008-01-23 16:14:37 +0000 (Wed, 23 Jan 2008)
New Revision: 8022

Modified:
   data/CVE/list
Log:
mantis confirmed not-affected


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-01-23 13:20:24 UTC (rev 8021)
+++ data/CVE/list	2008-01-23 16:14:37 UTC (rev 8022)
@@ -11,7 +11,8 @@
 CVE-2008-0405
 	RESERVED
 CVE-2008-0404 (Cross-site scripting (XSS) vulnerability in Mantis before 1.1.1 allows ...)
-	- mantis <unfixed> (low; bug #462245)
+	- mantis <not-affected> (Vulnerable code not present)
+	NOTE: code was introduced in the 1.1.x series, which are not shipped by us yet
 CVE-2008-0403 (The web server in Belkin Wireless G Plus MIMO Router F5D9230-4 does ...)
 	NOT-FOR-US: Belkin Wireless firmware
 CVE-2008-0402 (Unspecified vulnerability in IBM WebSphere Business Modeler Basic and ...)