Secure testing commits - Jan 2009 - r11099 - data/CVE

Author: white
Date: 2009-01-29 19:16:39 +0000 (Thu, 29 Jan 2009)
New Revision: 11099

Modified:
   data/CVE/list
Log:
phpicalendar now in debian, three issues currently affect it

Modified: data/CVE/list
==================================================================---
data/CVE/list	2009-01-29 18:58:34 UTC (rev 11098)
+++ data/CVE/list	2009-01-29 19:16:39 UTC (rev 11099)
@@ -130,9 +130,9 @@
 CVE-2009-0265 (Internet Systems Consortium (ISC) BIND 9.6.0 and earlier does
not ...)
 	TODO: check
 CVE-2008-5968 (Directory traversal vulnerability in print.php in PHP iCalendar
2.24 ...)
-	TODO: check
+	- phpicalendar <unfixed> (bug #513517)
 CVE-2008-5967 (admin/index.php in PHP iCalendar 2.3.4, 2.24, and earlier does
not ...)
-	TODO: check
+	- phpicalendar <unfixed> (bug #513517)
 CVE-2009-0278 (Sun Java System Application Server (AS) 8.1 and 8.2 allows
remote ...)
 	NOT-FOR-US: Sun Java System Application Server (AS)
 CVE-2009-0277 (Unspecified vulnerability in the kernel in OpenSolaris snv_100
through ...)
@@ -926,7 +926,7 @@
 CVE-2008-5841 (Multiple SQL injection vulnerabilities in iGaming 1.5 and
earlier ...)
 	NOT-FOR-US: iGaming
 CVE-2008-5840 (PHP iCalendar 2.24 and earlier allows remote attackers to bypass
...)
-	NOT-FOR-US: PHP iCalendar
+	- phpicalendar <unfixed> (bug #513517)
 CVE-2008-5839 (Buffer overflow in Foxmail 6.5 allows remote attackers to
execute ...)
 	NOT-FOR-US: Foxmail
 CVE-2008-5838 (SQL injection vulnerability in search_results.php in E-Php
Scripts ...)