[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Note change ind adminer 4.4.0 changing behaviour in response to the CVE-2018-7667 report

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ddebf503 by Salvatore Bonaccorso at 2018-03-19T18:46:55+01:00
Note change ind adminer 4.4.0 changing behaviour in response to the CVE-2018-7667 report

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -2551,6 +2551,7 @@ CVE-2018-7668 (TestLink through 1.9.16 allows remote attackers to read arbitrary
 CVE-2018-7667 (Adminer through 4.3.1 has SSRF via the server parameter. ...)
 	- adminer <unfixed>
 	NOTE: http://hyp3rlinx.altervista.org/advisories/ADMINER-UNAUTHENTICATED-SERVER-SIDE-REQUEST-FORGERY.txt
+	NOTE: adminer 4.4.0 disallows connecting to privileged ports
 CVE-2018-7666 (An issue was discovered in ClipBucket before 4.0.0 Release 4902. SQL ...)
 	NOT-FOR-US: ClipBucket
 CVE-2018-7665 (An issue was discovered in ClipBucket before 4.0.0 Release 4902. A ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/ddebf503f5c720b834478c4987b1382ac8f54f44

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/ddebf503f5c720b834478c4987b1382ac8f54f44
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180319/501d1107/attachment.html>