[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Filed CVE-2018-7667 as #893668

Chris Lamb lamby at debian.org
Wed Mar 21 02:52:04 UTC 2018


Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7ae1f61b by Chris Lamb at 2018-03-20T22:51:33-04:00
Filed CVE-2018-7667 as #893668

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -2673,7 +2673,7 @@ CVE-2018-7669
 CVE-2018-7668 (TestLink through 1.9.16 allows remote attackers to read arbitrary ...)
 	NOT-FOR-US: TestLink
 CVE-2018-7667 (Adminer through 4.3.1 has SSRF via the server parameter. ...)
-	- adminer 4.5.0-1
+	- adminer 4.5.0-1 (bug #893668)
 	NOTE: http://hyp3rlinx.altervista.org/advisories/ADMINER-UNAUTHENTICATED-SERVER-SIDE-REQUEST-FORGERY.txt
 	NOTE: https://github.com/vrana/adminer/commit/0fae40fb611b5c8167fa2b8d40bf576a8935a380
 	NOTE: adminer 4.4.0 disallows connecting to privileged ports, and thus not "enumerating"



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/7ae1f61b098450ae3d27e5c26e94d6c83165fae8

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/7ae1f61b098450ae3d27e5c26e94d6c83165fae8
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180321/fe207d5f/attachment.html>


More information about the Secure-testing-commits mailing list