Secure testing commits - Nov 2005 - r2723 - data/CVE

Author: neilm
Date: 2005-11-13 19:32:58 +0000 (Sun, 13 Nov 2005)
New Revision: 2723

Modified:
   data/CVE/list
Log:
Couple more todos done


Modified: data/CVE/list
==================================================================---
data/CVE/list	2005-11-13 17:09:22 UTC (rev 2722)
+++ data/CVE/list	2005-11-13 19:32:58 UTC (rev 2723)
@@ -18687,7 +18687,7 @@
 	NOT-FOR-US: no_package
 CVE-2002-0684 (Buffer overflow in DNS resolver functions that perform lookup of
...)
 	- glibc 2.2.5-8
-CVE-2002-0683 (Directory traversal vulnerability in Carello 1.3 allows remote
...)
+CVE-2001-0683 (Directory traversal vulnerability in Carello 1.3 allows remote
...)
 	NOT-FOR-US: no_package
 CVE-2002-0681 (Cross-site scripting vulnerability in GoAhead Web Server 2.1
allows ...)
 	NOT-FOR-US: no_package
@@ -18858,7 +18858,7 @@
 	NOT-FOR-US: real helix
 CVE-2004-0045 (Buffer overflow in the ARTpost function in art.c in the control
...)
 	- inn2 2.4.1+20040820
-	TODO: test
+	[woody] <not-affected>
 CVE-2004-0044 (Cisco Personal Assistant 1.4(1) and 1.4(2) disables password
...)
 	NOT-FOR-US: cisco
 CVE-2004-0040 (Stack-based buffer overflow in Check Point VPN-1 Server 4.1
through ...)

* Neil McGovern:
> -CVE-2002-0683 (Directory traversal vulnerability in Carello 1.3 allows
remote ...)
> +CVE-2001-0683 (Directory traversal vulnerability in Carello 1.3 allows
remote ...)
>  	NOT-FOR-US: no_package
This is an accident, I supose.  I will revert it.