[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Advisory description text



Moritz Muehlenhoff wrote:
> CVE-2007-3382
> 
>     It was discovered that single quotes (') in cookies were treated
>     as a delimiter, which could lead to an information leak.
> 
> CVE-2007-3385
> 
>     It was discovered that the character sequence \" in cookies was
>     handled incorrectly, which could lead to an information leak.
> 
> CVE-2007-5461
> 
>     It was discovered that the WebDAV servlet is vulnerable to absolute
>     path traversal.
> 

First of all, this is not targeted at this specific advisory or any
person writing this advisory. :)

Generally, the first little bits of each and every CVE description
above, as well as in other advisories sent out by Debian, is not needed.
Please, remove the "It was discovered that" part from any templates that
you may be using. That part is not needed. It is also implied and
doesn't add anything to the advisory.

- Adam


Reply to: