[Secure-testing-commits] r42525 - data/CVE

Tue Jun 14 12:16:13 UTC 2016

Author: pabs
Date: 2016-06-14 12:16:13 +0000 (Tue, 14 Jun 2016)
New Revision: 42525

Modified:
   data/CVE/list
Log:
CVE-2016-4010 is NFU (Magento)

Thanks-to: Sander Bos

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2016-06-14 12:12:46 UTC (rev 42524)
+++ data/CVE/list	2016-06-14 12:16:13 UTC (rev 42525)
@@ -4198,6 +4198,9 @@
 	RESERVED
 CVE-2016-4010
 	RESERVED
+	NOT-FOR-US: Magento
+	NOTE: https://magento.com/security/patches/magento-206-security-update
+	NOTE: http://www.netanelrub.in/2016/05/17/magento-unauthenticated-remote-code-execution/
 CVE-2016-4007 (Multiple unspecified vulnerabilities in the obs-service-extract_file ...)
 	NOT-FOR-US: obs-service-extract_file
 CVE-2015-8850


