Author: nion Date: 2007-08-14 15:46:01 +0000 (Tue, 14 Aug 2007) New Revision: 6303 Modified: data/CVE/list Log: pure-ftpd-mysql fixed (low) Modified: data/CVE/list ==================================================================--- data/CVE/list 2007-08-14 15:06:46 UTC (rev 6302) +++ data/CVE/list 2007-08-14 15:46:01 UTC (rev 6303) @@ -7772,7 +7772,8 @@ NOTE: Doesn''t affect a standard Debian installation, only users, which install NOTE: proprietary apps, it should be fixed for sanity, but not a direct vulnerability CVE-2006-XXXX [pure-ftpd-mysql: any problems with a home dir will allow rw to the entire filesystem] - - pure-ftpd <unfixed> (bug #350889) + - pure-ftpd-mysql 1.0.21-1 (low) + NOTE: oldstable is affected CVE-2007-XXXX [MediaWiki XSS based on Microsoft Internet Explorer''s UTF-7 charset autodetection] - mediawiki1.7 1.7.1-9 (low) CVE-2007-1049 (Cross-site scripting (XSS) vulnerability in the wp_explain_nonce ...)