[Secure-testing-commits] r23324 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2013-08-15 07:21:09 +0000 (Thu, 15 Aug 2013)
New Revision: 23324

Modified:
   data/CVE/list
Log:
update CVE-2011-4718 after quick look at php5/unstable, update todo entry, part of external check

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-08-15 05:55:40 UTC (rev 23323)
+++ data/CVE/list	2013-08-15 07:21:09 UTC (rev 23324)
@@ -30880,7 +30880,8 @@
 	- webkit <not-affected>
 	NOTE: Duplicate for chromebooks
 CVE-2011-4718 (Session fixation vulnerability in the Sessions subsystem in PHP before ...)
-	TODO: check
+	- php5 <unfixed>
+	TODO: check and report
 CVE-2011-4717 (Directory traversal vulnerability in zFTPServer Suite 6.0.0.52 allows ...)
 	NOT-FOR-US: zFTPServer Suite 
 CVE-2011-4716 (Directory traversal vulnerability in file in DreamBox DM800 1.6rc3, ...)