Secure testing commits - Mar 2009 - r11339 - data/CVE

Author: white
Date: 2009-03-06 12:37:46 +0000 (Fri, 06 Mar 2009)
New Revision: 11339

Modified:
   data/CVE/list
Log:
New nagios issue fixed in sid/squeeze/lenny, no-dsa for etch

Modified: data/CVE/list
==================================================================---
data/CVE/list	2009-03-06 12:21:02 UTC (rev 11338)
+++ data/CVE/list	2009-03-06 12:37:46 UTC (rev 11339)
@@ -191,7 +191,8 @@
 CVE-2008-6374 (CodefixerSoftware MailingListPro Free Edition stores sensitive
...)
 	NOT-FOR-US: MailingListPro Free Edition
 CVE-2008-6373 (Unspecified vulnerability in Nagios before 3.0.6 has unspecified
...)
-	TODO: check
+	- nagios3 3.0.6-3
+	[etch] - nagios2 <no-dsa> (Related to CVE-2008-5028, which has minimal
attack vector)
 CVE-2008-6372 (SQL injection vulnerability in default.asp in Ocean12 FAQ
Manager Pro ...)
 	NOT-FOR-US: Ocean12 FAQ Manager Pro
 CVE-2008-6371 (SQL injection vulnerability in login.asp in Ocean12 Membership
Manager ...)