Author: jmm-guest
Date: 2005-11-17 08:22:56 +0000 (Thu, 17 Nov 2005)
New Revision: 2767
Modified:
data/CVE/list
Log:
phpmyadmin CVEfied and fixed
Modified: data/CVE/list
==================================================================---
data/CVE/list 2005-11-16 23:34:39 UTC (rev 2766)
+++ data/CVE/list 2005-11-17 08:22:56 UTC (rev 2767)
@@ -1,5 +1,5 @@
-CVE-2005-XXXX [phpmyadmin HTTP response splitting]
- - phpmyadmin <unfixed> (bug #339437; medium)
+CVE-2005-3621 [phpmyadmin HTTP response splitting]
+ - phpmyadmin 4:2.6.4-pl4-1 (bug #339437; medium)
CVE-2005-XXXX [openswan isakmp dos]
- openswan 1:2.4.3-1 (bug #339082; medium)
TODO: Keep an eye on ipsec-tools''s upstream, it''s
potentially affected as well
@@ -8311,9 +8311,8 @@
- gaim 1:1.3.1-1 (bug #315356; low)
CVE-2005-1268 (Off-by-one error in the mod_ssl Certificate Revocation List
(CRL) ...)
{DSA-805-1}
- NOTE: This is from latest Trustix advisory, exploitation would require to
trick
- NOTE: someone into using a maliciously crafted certificate revocation list
- apache2 2.0.54-5 (bug #320048; bug #320063; bug #322613; low)
+ - apache <not-affected> (Not affected, see #322613)
CVE-2005-1267 (The bgp_update_print function in tcpdump 3.x does not properly
handle ...)
{DSA-854-1}
- tcpdump 3.9.0.cvs.20050614-1 (medium)