[Secure-testing-commits] r47049 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Wed Dec 14 08:34:28 UTC 2016


Author: carnil
Date: 2016-12-14 08:34:28 +0000 (Wed, 14 Dec 2016)
New Revision: 47049

Modified:
   data/CVE/list
Log:
Update CVE-2016-9565

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-12-14 08:28:38 UTC (rev 47048)
+++ data/CVE/list	2016-12-14 08:34:28 UTC (rev 47049)
@@ -7929,11 +7929,11 @@
 	- nagios3 <removed>
 	NOTE: https://github.com/NagiosEnterprises/nagioscore/commit/c29557dec91eba2306f5fb11b8da4474ba63f8c4
 	TODO: check
-CVE-2016-9565
+CVE-2016-9565 [Curl Command Injection]
 	RESERVED
-	- nagios3 <removed>
+	- nagios3 3.5.1-1
 	NOTE: https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html
-	TODO: check
+	NOTE: The RSS feed and call-home was removed with the 3.5.1-1 were the affected function was removed
 CVE-2016-9564 (Buffer overflow in send_redirect() in Boa Webserver 0.92r allows ...)
 	- boa <not-affected> (the vuln was removed in 0.93.14)
 	NOTE: http://www.ljcusack.io/cve-2016-9564-stack-based-buffer-overflow-in-boa-0-dot-92r




More information about the Secure-testing-commits mailing list