[Secure-testing-commits] r18248 - data/CVE

[Thijs Kinkhorst]

Author: thijs
Date: 2012-01-22 11:50:08 +0000 (Sun, 22 Jan 2012)
New Revision: 18248

Modified:
   data/CVE/list
Log:
phpmyadmin updates


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2012-01-21 18:06:25 UTC (rev 18247)
+++ data/CVE/list	2012-01-22 11:50:08 UTC (rev 18248)
@@ -2330,11 +2330,17 @@
 CVE-2011-4783 (The IDAPython plugin before 1.5.2.3 in IDA Pro allows user-assisted ...)
 	NOT-FOR-US: IDA Pro
 CVE-2011-4782 (Cross-site scripting (XSS) vulnerability in ...)
-	- phpmyadmin 4:3.4.9-1
+	- phpmyadmin 4:3.4.9-1 (unimportant)
+	[squeeze] - phpmyadmin <not-affected> (Vulnerable code not present)
+	[lenny] - phpmyadmin <not-affected> (Vulnerable code not present)
+	NOTE: unlikely exploitation scenario
 CVE-2011-4781
 	RESERVED
 CVE-2011-4780 (Multiple cross-site scripting (XSS) vulnerabilities in ...)
-	- phpmyadmin 4:3.4.9-1
+	- phpmyadmin 4:3.4.9-1 (unimportant)
+	[squeeze] - phpmyadmin <not-affected> (Vulnerable code not present)
+	[lenny] - phpmyadmin <not-affected> (Vulnerable code not present)
+	NOTE: unlikely exploitation scenario
 CVE-2011-4779
 	REJECTED
 CVE-2011-4778 (Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk 4.2.x ...)
@@ -6135,6 +6141,8 @@
 CVE-2011-3592 [phpMyAdmin did not properly sanitize the content of db, table, and column names prior use of their values.]
 	RESERVED
 	- phpmyadmin 4:3.4.5-1
+	[squeeze] - phpmyadmin <not-affected> (Vulnerable code not present)
+	[lenny] - phpmyadmin <not-affected> (Vulnerable code not present)
 CVE-2011-3591 [PMASA-2011-14 XSS]
 	RESERVED
 	- phpmyadmin 4:3.4.5-1