[Secure-testing-commits] r14527 - data/CVE

Nico Golde nion at alioth.debian.org
Mon Apr 19 14:19:42 UTC 2010


Author: nion
Date: 2010-04-19 14:19:40 +0000 (Mon, 19 Apr 2010)
New Revision: 14527

Modified:
   data/CVE/list
Log:
zope cvefied

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-04-19 13:26:06 UTC (rev 14526)
+++ data/CVE/list	2010-04-19 14:19:40 UTC (rev 14527)
@@ -915,8 +915,6 @@
 	NOT-FOR-US: AdvertisementManager
 CVE-2010-1105 (Cross-site scripting (XSS) vulnerability in cgi/index.php in ...)
 	NOT-FOR-US: AdvertisementManager
-CVE-2010-1104 (Cross-site scripting (XSS) vulnerability in Zope 2.8.x before 2.8.12, ...)
-	TODO: check
 CVE-2010-1103 (Integer overflow in Stainless allows remote attackers to bypass ...)
 	NOT-FOR-US: Stainless
 CVE-2010-1102 (Integer overflow in OmniWeb allows remote attackers to bypass intended ...)
@@ -3157,7 +3155,7 @@
 	NOT-FOR-US: MYRE Holiday Rental Manager
 CVE-2009-4614 (Multiple PHP remote file inclusion vulnerabilities in Moa Gallery ...)
 	NOT-FOR-US: Moa Gallery
-CVE-2010-XXXX [zope standard_error_message XSS]
+CVE-2010-1104 (Cross-site scripting (XSS) vulnerability in Zope 2.8.x before 2.8.12, ...)
 	- zope2.10 <removed> (low)
 	[lenny] - zope2.10 <no-dsa> (Minor issue)
 	- zope2.11 <removed>




More information about the Secure-testing-commits mailing list