[Secure-testing-commits] r34883 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-06-11 15:56:19 +0000 (Thu, 11 Jun 2015)
New Revision: 34883

Modified:
   data/CVE/list
Log:
Updates for new cacti issues, two without CVEs

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-06-11 15:41:51 UTC (rev 34882)
+++ data/CVE/list	2015-06-11 15:56:19 UTC (rev 34883)
@@ -1,3 +1,11 @@
+CVE-2015-XXXX [VN: JVN#78187936 / TN:JPCERT#98968540]
+	- cacti <unfixed>
+	NOTE: http://svn.cacti.net/viewvc?view=rev&revision=7718
+	NOTE: Fixed upstream in 0.8.8d
+CVE-2015-XXXX [SQL injection in graph templates]
+	- cacti <unfixed>
+	NOTE: http://svn.cacti.net/viewvc?view=rev&revision=7720
+	NOTE: Fixed upstream in 0.8.8d
 CVE-2015-4457
 	RESERVED
 CVE-2015-4456
@@ -227,8 +235,8 @@
 	- cacti <unfixed>
 	NOTE: Original report: http://seclists.org/fulldisclosure/2015/Jun/19
 	NOTE: Upstream bug: http://bugs.cacti.net/view.php?id=2571 (not yet accessible)
-	NOTE: fixed upstream in 0.8.8d
-	TODO: check
+	NOTE: http://svn.cacti.net/viewvc?view=rev&revision=7719
+	NOTE: Fixed upstream in 0.8.8d
 CVE-2015-4341
 	RESERVED
 CVE-2015-4340