[Secure-testing-commits] r21826 - data/CVE

Salvatore Bonaccorso carnil at alioth.debian.org
Wed Apr 3 17:53:29 UTC 2013


Author: carnil
Date: 2013-04-03 17:53:28 +0000 (Wed, 03 Apr 2013)
New Revision: 21826

Modified:
   data/CVE/list
Log:
add modsecurity-apache issue, CVE-2013-1915

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-04-03 17:48:55 UTC (rev 21825)
+++ data/CVE/list	2013-04-03 17:53:28 UTC (rev 21826)
@@ -1817,8 +1817,11 @@
 CVE-2013-1916
 	RESERVED
 	NOT-FOR-US: WordPress plugin
-CVE-2013-1915
+CVE-2013-1915 [Vulnerable to XXE attacks]
 	RESERVED
+	- modsecurity-apache <unfixed>
+	NOTE: https://github.com/SpiderLabs/ModSecurity/commit/d4d80b38aa85eccb26e3c61b04d16e8ca5de76fe
+	NOTE: http://marc.info/?l=oss-security&m=136499182131283&w=2
 CVE-2013-1914 [getaddrinfo() stack overflow]
 	RESERVED
 	- eglibc <unfixed> (bug #704623) 




More information about the Secure-testing-commits mailing list