[Secure-testing-commits] r11890 - data/CVE

[Thijs Kinkhorst]

Author: thijs
Date: 2009-05-13 15:55:50 +0000 (Wed, 13 May 2009)
New Revision: 11890

Modified:
   data/CVE/list
Log:
new squirrelmail issues, I will work on these


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-05-13 11:35:03 UTC (rev 11889)
+++ data/CVE/list	2009-05-13 15:55:50 UTC (rev 11890)
@@ -106,14 +106,18 @@
 	NOT-FOR-US: DFLabs
 CVE-2008-6792 (system-tools-backends before 2.6.0-1ubuntu1.1 in Ubuntu 8.10, as used ...)
 	- system-tools-backends <unfixed> (low; bug #527952)
-CVE-2009-1581
+CVE-2009-1581 [SquirrelMail CSS positioning]
 	RESERVED
-CVE-2009-1580
+	- squirrelmail <unfixed> (bug #528528)
+CVE-2009-1580 [SquirrelMail session fixation]
 	RESERVED
-CVE-2009-1579
+	- squirrelmail <unfixed> (bug #528528)
+CVE-2009-1579 [Squirrelmail map_yp_alias code injection]
 	RESERVED
-CVE-2009-1578
+	- squirrelmail <unfixed> (bug #528528)
+CVE-2009-1578 [SquirrelMail XSS]
 	RESERVED
+	- squirrelmail <unfixed> (bug #528528)
 CVE-2009-1577 (Multiple stack-based buffer overflows in the putstring function in ...)
 	- cscope 15.6-1
 CVE-2009-1576 (Unspecified vulnerability in Drupal 5.x before 5.17 and 6.x before ...)