From f3d721091d70198186b24bb7254e7cd4726546ce Mon Sep 17 00:00:00 2001 From: nectar Date: Fri, 7 Jan 2005 13:59:15 +0000 Subject: Fix up last commit (tnftp entry): - Malformed XML - mismatched tags () - invalid entity reference &content-type= (ampersand should have been replaced with &) - Replace so that it matches all possible versions for now, until a fixed version is available in the ports tree - date was in the past Approved by: portmgr (implicit, VuXML) Pointy hat to: ahze (hint: make validate) --- security/vuxml/vuln.xml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) (limited to 'security') diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 545cc7c07183..a24cbd4d9cc1 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -35,9 +35,9 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. tnftp -- mget does not check for directory escapes - + tnftp - 20030825 + 0 @@ -50,13 +50,13 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. http://tigger.uic.edu/~jlongs2/holes/tnftp.txt - http://cvsweb.netbsd.org/bsdweb.cgi/othersrc/usr.bin/tnftp/src/cmds.c?rev=1.1.1.3&content-type=text/x-cvsweb-markup + http://cvsweb.netbsd.org/bsdweb.cgi/othersrc/usr.bin/tnftp/src/cmds.c?rev=1.1.1.3&content-type=text/x-cvsweb-markup http://it.slashdot.org/article.pl?sid=04/12/15/2113202 http://marc.theaimsgroup.com/?l=bugtraq&m=110321888413132 2004-12-15 - 2005-01-04 + 2005-01-07 -- cgit