Author: geissert
Date: 2009-08-29 16:33:49 +0000 (Sat, 29 Aug 2009)
New Revision: 12705
Modified:
data/CVE/list
Log:
Merge a dup
Modified: data/CVE/list
==================================================================---
data/CVE/list 2009-08-29 09:14:18 UTC (rev 12704)
+++ data/CVE/list 2009-08-29 16:33:49 UTC (rev 12705)
@@ -174,11 +174,6 @@
TODO: check
CVE-2008-7069 (All Club CMS (ACCMS) 0.0.2 and earlier stores sensitive
information ...)
NOT-FOR-US: All Club CMS (ACCMS)
-CVE-2008-7068 (The dba_replace function in PHP 5.2.6 and 4.x allows
context-dependent ...)
- {DTSA-188-1}
- - php5 5.2.6.dfsg.1-3 (low; bug #507101)
- - php4 <removed> (low)
- NOTE: no-dsa candidate, if a user has write access to a file he simply can use
fopen()
CVE-2008-7067 (PHP remote file inclusion vulnerability in ...)
NOT-FOR-US: PageTree CMS
CVE-2008-7066 (OpenForum 0.66 Beta allows remote attackers to bypass
authentication ...)
@@ -11746,11 +11741,12 @@
NOTE: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=495542#82
NOTE: upstream has been notified
TODO: write proper advisory and request CVE id
-CVE-2008-XXXX [php: inifile handler for the dba functions can be used to
truncate a file]
+CVE-2008-7068 (The dba_replace function in PHP 5.2.6 and 4.x allows
context-dependent ...)
+ {DTSA-188-1}
- php5 5.2.6.dfsg.1-3 (low; bug #507101)
[lenny] - php5 5.2.6.dfsg.1-1+lenny2
- - php4 <unfixed> (low)
- NOTE: CVE id requested denied
+ - php4 <removed> (low)
+ NOTE: no-dsa candidate, if a user has write access to a file he simply can use
fopen()
CVE-2008-5278 (Cross-site scripting (XSS) vulnerability in the self_link
function in ...)
- wordpress 2.5.1-11 (low; bug #507193)
[etch] - wordpress <not-affected> (Vulnerable code not present)