Secure testing commits - May 2008 - r8860 - data/CVE

Author: stef-guest
Date: 2008-05-21 10:52:43 +0000 (Wed, 21 May 2008)
New Revision: 8860

Modified:
   data/CVE/list
Log:
apache "issue" already fixed

Modified: data/CVE/list
==================================================================---
data/CVE/list	2008-05-21 09:32:11 UTC (rev 8859)
+++ data/CVE/list	2008-05-21 10:52:43 UTC (rev 8860)
@@ -455,7 +455,9 @@
 CVE-2008-2169 (Unspecified vulnerability in Avici routers allows remote
attackers to ...)
 	NOT-FOR-US: Avici routers
 CVE-2008-2168 (Cross-site scripting (XSS) vulnerability in Apache 2.2.6 and
earlier ...)
-	TODO: check
+	- apache2 2.2.8-1 (low)
+	[etch] - apache2 2.2.3-4+etch4 (low)
+	NOTE: This is really a browser issue. Recent apache versions add a workaround.
 CVE-2008-2167 (Cross-site scripting (XSS) vulnerability in ZyXEL ZyWALL 100
allows ...)
 	NOT-FOR-US: ZyXEL ZyWALL
 CVE-2008-2166 (Cross-site scripting (XSS) vulnerability in the search module in
Sun ...)