[Secure-testing-commits] r11346 - data/CVE

[jmm-guest at alioth.debian.org]

Author: jmm-guest
Date: 2009-03-06 23:48:04 +0000 (Fri, 06 Mar 2009)
New Revision: 11346

Modified:
   data/CVE/list
Log:
znc CVEfied


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-03-06 21:14:16 UTC (rev 11345)
+++ data/CVE/list	2009-03-06 23:48:04 UTC (rev 11346)
@@ -183,7 +183,7 @@
 CVE-2009-0760 (Team Board 1.x and 2.x stores sensitive information under the web root ...)
 	NOT-FOR-US: Team Board
 CVE-2009-0759 (Multiple CRLF injection vulnerabilities in webadmin in ZNC before ...)
-	TODO: check
+	- znc 0.066-1 (bug #516950)
 CVE-2009-0758 (The originates_from_local_legacy_unicast_socket function in ...)
 	- avahi <unfixed> (bug #517683)
 CVE-2009-0757 (Multiple buffer overflows in GNU MPFR 2.4.0 allow context-dependent ...)
@@ -454,8 +454,6 @@
 	NOT-FOR-US: nicLOR Sito
 CVE-2008-6289 (SQL injection vulnerability in cityview.php in Tours Manager 1.0 ...)
 	NOT-FOR-US: Tours Manager
-CVE-2009-XXXX [znc: authenticated users can obtain shell access]
-	- znc 0.066-1 (bug #516950)
 CVE-2009-0770 (dkim-milter 2.6.0 through 2.8.0 allows remote attackers to cause a ...)
 	- dkim-milter 2.6.0.dfsg-2 (low)
 	[lenny] - dkim-milter 2.6.0.dfsg-1+lenny1