nion at alioth.debian.org
2008-Oct-22 17:42 UTC
[Secure-testing-commits] r10149 - data/CVE
Author: nion Date: 2008-10-22 17:42:52 +0000 (Wed, 22 Oct 2008) New Revision: 10149 Modified: data/CVE/list Log: mantis cveified Modified: data/CVE/list ==================================================================--- data/CVE/list 2008-10-22 17:41:25 UTC (rev 10148) +++ data/CVE/list 2008-10-22 17:42:52 UTC (rev 10149) @@ -93,12 +93,9 @@ TODO: check if >= 0.9.4 is uploaded to unstable CVE-2008-4686 [integer overflow in ty parsing] - vlc <unfixed> (medium; bug #503118) - NOTE: code in 0.8.6.i-2 does not have this flaw, experimental version (0.9.4 is vulnerable) - TODO: check if >= 0.9.4 is uploaded to unstable -CVE-2008-XXXX [mantis code execution] +CVE-2008-4687 [mantis code execution] - mantis 1.1.2+dfsg-7 (medium; bug #502728) NOTE: only registered users can perform this - NOTE: CVE id requested on oss-sec CVE-2008-4592 (Directory traversal vulnerability in index.php in Sports Clubs Web ...) NOT-FOR-US: Sports Clubs Web Panel CVE-2008-4591 (Multiple cross-site scripting (XSS) vulnerabilities in ...)