[Secure-testing-commits] r11839 - data/CVE

[Giuseppe Iuculano]

Author: derevko-guest
Date: 2009-05-08 08:51:54 +0000 (Fri, 08 May 2009)
New Revision: 11839

Modified:
   data/CVE/list
Log:
CVE-2009-1524: bug filled against jetty

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-05-08 01:33:26 UTC (rev 11838)
+++ data/CVE/list	2009-05-08 08:51:54 UTC (rev 11839)
@@ -122,8 +122,7 @@
 CVE-2009-1525 (CMD_DB in JBMC Software DirectAdmin before 1.334 allows remote ...)
 	NOT-FOR-US: Directadmin
 CVE-2009-1524 (Cross-site scripting (XSS) vulnerability in Mort Bay Jetty before ...)
-	- jetty <unfixed> (low)
-	TODO: file bug
+	- jetty <unfixed> (low; bug #527571)
 	NOTE: only in unstable, only in contrib, fairly unmaintained
 CVE-2009-1523 (Directory traversal vulnerability in the HTTP server in Mort Bay Jetty ...)
 	- jetty <unfixed> (unimportant)