summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJacques Vidrine <nectar@FreeBSD.org>2005-01-07 13:59:15 +0000
committerJacques Vidrine <nectar@FreeBSD.org>2005-01-07 13:59:15 +0000
commit955c5bc874e8b6c5af472519c76481777367c690 (patch)
tree62b925679ad98d028d56ab744ecc1a547c864718
parent- fix runtime problem (diff)
Fix up last commit (tnftp entry):
- Malformed XML - mismatched tags (<packages></package>) - invalid entity reference &content-type= (ampersand should have been replaced with &amp;) - Replace <range> so that it matches all possible versions for now, until a fixed version is available in the ports tree - <entry> date was in the past Approved by: portmgr (implicit, VuXML) Pointy hat to: ahze (hint: make validate)
Notes
Notes: svn path=/head/; revision=125747
-rw-r--r--security/vuxml/vuln.xml8
1 files changed, 4 insertions, 4 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml
index 545cc7c07183..a24cbd4d9cc1 100644
--- a/security/vuxml/vuln.xml
+++ b/security/vuxml/vuln.xml
@@ -35,9 +35,9 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
<vuln vid="f92e1bbc-5e18-11d9-839a-0050da134090">
<topic>tnftp -- mget does not check for directory escapes</topic>
<affects>
- <packages>
+ <package>
<name>tnftp</name>
- <range><eq>20030825</eq></range>
+ <range><ge>0</ge></range>
</package>
</affects>
<description>
@@ -50,13 +50,13 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
</description>
<references>
<url>http://tigger.uic.edu/~jlongs2/holes/tnftp.txt</url>
- <url>http://cvsweb.netbsd.org/bsdweb.cgi/othersrc/usr.bin/tnftp/src/cmds.c?rev=1.1.1.3&content-type=text/x-cvsweb-markup</url>
+ <url>http://cvsweb.netbsd.org/bsdweb.cgi/othersrc/usr.bin/tnftp/src/cmds.c?rev=1.1.1.3&amp;content-type=text/x-cvsweb-markup</url>
<url>http://it.slashdot.org/article.pl?sid=04/12/15/2113202</url>
<mlist msgid="653D74053BA6F54A81ED83DCF969DF08CFA2AA@pivxes1.pivx.com">http://marc.theaimsgroup.com/?l=bugtraq&amp;m=110321888413132</mlist>
</references>
<dates>
<discovery>2004-12-15</discovery>
- <entry>2005-01-04</entry>
+ <entry>2005-01-07</entry>
</dates>
</vuln>