[Secure-testing-commits] r18061 - data/CVE

[Yves-Alexis Perez]

Author: corsac
Date: 2012-01-06 15:02:27 +0000 (Fri, 06 Jan 2012)
New Revision: 18061

Modified:
   data/CVE/list
Log:
mark CVE-2006-3389 and CVE-2006-3390 as fixed in 2.0.4


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2012-01-06 14:52:04 UTC (rev 18060)
+++ data/CVE/list	2012-01-06 15:02:27 UTC (rev 18061)
@@ -84384,9 +84384,11 @@
 CVE-2006-3391 (The Execute function in iMBCContents ActiveX Control before 2.0.0.59 ...)
 	NOT-FOR-US: iMBCContents
 CVE-2006-3390 (WordPress 2.0.3 allows remote attackers to obtain the installation ...)
-	- wordpress <unfixed> (unimportant)
+	- wordpress 2.0.4-1 (unimportant)
+	NOTE: http://wordpress.org/news/2006/07/wordpress-204/
 CVE-2006-3389 (index.php in WordPress 2.0.3 allows remote attackers to obtain ...)
-	- wordpress <unfixed> (unimportant)
+	- wordpress 2.0.4-1 (unimportant)
+	NOTE: http://wordpress.org/news/2006/07/wordpress-204/
 CVE-2006-3388 (Cross-site scripting (XSS) vulnerability in phpMyAdmin before 2.8.2 ...)
 	- phpmyadmin 4:2.8.2-0.1 (bug #377748; low)
 	[sarge] - phpmyadmin <not-affected> (Vulnerable code not present)