[Secure-testing-commits] r11339 - data/CVE

[white at alioth.debian.org]

Author: white
Date: 2009-03-06 12:37:46 +0000 (Fri, 06 Mar 2009)
New Revision: 11339

Modified:
   data/CVE/list
Log:
New nagios issue fixed in sid/squeeze/lenny, no-dsa for etch

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-03-06 12:21:02 UTC (rev 11338)
+++ data/CVE/list	2009-03-06 12:37:46 UTC (rev 11339)
@@ -191,7 +191,8 @@
 CVE-2008-6374 (CodefixerSoftware MailingListPro Free Edition stores sensitive ...)
 	NOT-FOR-US: MailingListPro Free Edition
 CVE-2008-6373 (Unspecified vulnerability in Nagios before 3.0.6 has unspecified ...)
-	TODO: check
+	- nagios3 3.0.6-3
+	[etch] - nagios2 <no-dsa> (Related to CVE-2008-5028, which has minimal attack vector)
 CVE-2008-6372 (SQL injection vulnerability in default.asp in Ocean12 FAQ Manager Pro ...)
 	NOT-FOR-US: Ocean12 FAQ Manager Pro
 CVE-2008-6371 (SQL injection vulnerability in login.asp in Ocean12 Membership Manager ...)