Secure testing commits - May 2007 - r5939 - data/CVE

Author: stef-guest
Date: 2007-05-26 12:11:31 +0000 (Sat, 26 May 2007)
New Revision: 5939

Modified:
   data/CVE/list
Log:
mutt bugnum, sitebar unimportant

Modified: data/CVE/list
==================================================================---
data/CVE/list	2007-05-26 11:34:34 UTC (rev 5938)
+++ data/CVE/list	2007-05-26 12:11:31 UTC (rev 5939)
@@ -259,7 +259,7 @@
 CVE-2007-2684 (Jetbox CMS 2.1 allows remote attackers to obtain sensitive
information ...)
 	TODO: check
 CVE-2007-2683 (Buffer overflow in Mutt 1.4.2 might allow local users to execute
...)
-	- mutt <unfixed> (low)
+	- mutt <unfixed> (low; bug #426116)
 CVE-2007-2682 (The installer for Adobe Version Cue CS3 Server on Apple Mac OS
X, as ...)
 	NOT-FOR-US: Adobe
 CVE-2007-2681 (Directory traversal vulnerability in blogs/index.php in
b2evolution ...)
@@ -1561,7 +1561,8 @@
 CVE-2007-2089 (Multiple PHP remote file inclusion vulnerabilities in the Jx
...)
 	NOT-FOR-US: Jx Development Article component for Mambo and Joomla
 CVE-2007-2088 (Multiple PHP remote file inclusion vulnerabilities in Sitebar
3.3.5 ...)
-	- sitebar <unfixed>
+	- sitebar 3.3.8-7 (unimportant)
+	NOTE: this was register globals only and is fixed in Debian anyway
 CVE-2007-2087 (Multiple PHP remote file inclusion vulnerabilities in CNStats
2.12, ...)
 	NOT-FOR-US: CNStats
 CVE-2007-2086 (Multiple PHP remote file inclusion vulnerabilities in CNStats
2.9 ...)