[Secure-testing-commits] r27816 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2014-07-18 18:50:10 +0000 (Fri, 18 Jul 2014)
New Revision: 27816

Modified:
   data/CVE/list
Log:
Add CVE-2008-7313/libphp-snoopy (incomplete fix for CVE-2008-4796)

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-07-18 18:46:15 UTC (rev 27815)
+++ data/CVE/list	2014-07-18 18:50:10 UTC (rev 27816)
@@ -37130,6 +37130,10 @@
 	NOT-FOR-US: Websense
 CVE-2009-5119 (The default configuration of Apache Tomcat in Websense Manager in ...)
 	NOT-FOR-US: Websense
+CVE-2008-7313 [Incomplete fix for CVE-2008-4796]
+	- libphp-snoopy <unfixed>
+	NOTE: additional commit missing, so fix for CVE-2008-4796 was incomplete
+	NOTE: http://snoopy.cvs.sourceforge.net/viewvc/snoopy/Snoopy/Snoopy.class.php?view=log#rev1.27
 CVE-2008-7312 (The Filtering Service in Websense Enterprise 5.2 through 6.3 does not ...)
 	NOT-FOR-US: Websense
 CVE-2012-4599 (McAfee SmartFilter Administration, and SmartFilter Administration Bess ...)