[Secure-testing-commits] r8313 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2008-03-11 20:28:09 +0000 (Tue, 11 Mar 2008)
New Revision: 8313

Modified:
   data/CVE/list
Log:
NFU
CVE-2008-116{7,8} fixed in sarg 2.2.4-1/2.2.5-1
flyspray was removed


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-03-11 14:17:26 UTC (rev 8312)
+++ data/CVE/list	2008-03-11 20:28:09 UTC (rev 8313)
@@ -194,19 +194,19 @@
 CVE-2008-1172 (Cross-site request forgery (CSRF) vulnerabilities in account-inbox.php ...)
 	NOT-FOR-US: TorrentTrader
 CVE-2008-1171 (** DISPUTED ** ...)
-	TODO: check
+	NOT-FOR-US: 123 Flash Chat Module for phpBB
 CVE-2008-1170 (Multiple PHP remote file inclusion vulnerabilities in KCWiki 1.0 allow ...)
 	NOT-FOR-US: KCWiki
 CVE-2008-1169 (Directory traversal vulnerability in the embedded HTTP server in SCI ...)
-	TODO: check
+	NOT-FOR-US: SCI Photo Chat Server
 CVE-2008-1168 (Cross-site scripting (XSS) vulnerability in Squid Analysis Report ...)
-	TODO: check
+	- sarg 2.2.5-1
 CVE-2008-1167 (Stack-based buffer overflow in the useragent function in useragent.c ...)
-	TODO: check
+	- sarg 2.2.4-1
 CVE-2008-1166 (Flyspray 0.9.9.4 generates different error messages depending on ...)
-	TODO: check
+	- flyspray <removed>
 CVE-2008-1165 (Multiple cross-site scripting (XSS) vulnerabilities in Flyspray 0.9.9 ...)
-	TODO: check
+	- flyspray <removed>
 CVE-2008-1164 (SQL injection vulnerability in index.php in phpComasy 0.8 allows ...)
 	TODO: check
 CVE-2008-1163 (SQL injection vulnerability in index.php in phpArcadeScript 1.0 ...)