aboutsummaryrefslogtreecommitdiffstats
path: root/security
diff options
context:
space:
mode:
authornectar <nectar@FreeBSD.org>2005-01-07 21:59:15 +0800
committernectar <nectar@FreeBSD.org>2005-01-07 21:59:15 +0800
commitf3d721091d70198186b24bb7254e7cd4726546ce (patch)
treed71d7b76c2c868127373b03d6c95d92e6d54942e /security
parent65057a0207d6026558897f9a874c793e5ad71c09 (diff)
downloadfreebsd-ports-gnome-f3d721091d70198186b24bb7254e7cd4726546ce.tar.gz
freebsd-ports-gnome-f3d721091d70198186b24bb7254e7cd4726546ce.tar.zst
freebsd-ports-gnome-f3d721091d70198186b24bb7254e7cd4726546ce.zip
Fix up last commit (tnftp entry):
- Malformed XML - mismatched tags (<packages></package>) - invalid entity reference &content-type= (ampersand should have been replaced with &amp;) - Replace <range> so that it matches all possible versions for now, until a fixed version is available in the ports tree - <entry> date was in the past Approved by: portmgr (implicit, VuXML) Pointy hat to: ahze (hint: make validate)
Diffstat (limited to 'security')
-rw-r--r--security/vuxml/vuln.xml8
1 files changed, 4 insertions, 4 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml
index 545cc7c07183..a24cbd4d9cc1 100644
--- a/security/vuxml/vuln.xml
+++ b/security/vuxml/vuln.xml
@@ -35,9 +35,9 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
<vuln vid="f92e1bbc-5e18-11d9-839a-0050da134090">
<topic>tnftp -- mget does not check for directory escapes</topic>
<affects>
- <packages>
+ <package>
<name>tnftp</name>
- <range><eq>20030825</eq></range>
+ <range><ge>0</ge></range>
</package>
</affects>
<description>
@@ -50,13 +50,13 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
</description>
<references>
<url>http://tigger.uic.edu/~jlongs2/holes/tnftp.txt</url>
- <url>http://cvsweb.netbsd.org/bsdweb.cgi/othersrc/usr.bin/tnftp/src/cmds.c?rev=1.1.1.3&content-type=text/x-cvsweb-markup</url>
+ <url>http://cvsweb.netbsd.org/bsdweb.cgi/othersrc/usr.bin/tnftp/src/cmds.c?rev=1.1.1.3&amp;content-type=text/x-cvsweb-markup</url>
<url>http://it.slashdot.org/article.pl?sid=04/12/15/2113202</url>
<mlist msgid="653D74053BA6F54A81ED83DCF969DF08CFA2AA@pivxes1.pivx.com">http://marc.theaimsgroup.com/?l=bugtraq&amp;m=110321888413132</mlist>
</references>
<dates>
<discovery>2004-12-15</discovery>
- <entry>2005-01-04</entry>
+ <entry>2005-01-07</entry>
</dates>
</vuln>