[Secure-testing-commits] r9383 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2008-07-21 11:51:52 +0000 (Mon, 21 Jul 2008)
New Revision: 9383

Modified:
   data/CVE/list
Log:
new mantis issues fixed in 1.1.2+dfsg-1

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-07-20 17:58:09 UTC (rev 9382)
+++ data/CVE/list	2008-07-21 11:51:52 UTC (rev 9383)
@@ -1,3 +1,9 @@
+CVE-2008-XXXX [mantis multiple issues]
+	- mantis 1.1.2+dfsg-1 (low)
+	NOTE: http://www.mantisbt.org/bugs/changelog_page.php
+	NOTE: CVE id requested by redhat
+	NOTE: 0008975 (CSRF) covered by CVE-2008-2276
+	NOTE: 0008976 remote code execution only possible with valid administrator account
 CVE-2008-3196 [out of bound access]
 	- byacc <unfixed> (low; bug #491182)
 CVE-2008-XXXX [libetpan NULL deref]