From owner-freebsd-vuxml@FreeBSD.ORG Tue Sep 28 08:08:30 2004 Return-Path: Delivered-To: freebsd-vuxml@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1ECE616A4CE for ; Tue, 28 Sep 2004 08:08:30 +0000 (GMT) Received: from smtp.infracaninophile.co.uk (happy-idiot-talk.infracaninophile.co.uk [81.2.69.218]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4EAE443D54 for ; Tue, 28 Sep 2004 08:08:29 +0000 (GMT) (envelope-from m.seaman@infracaninophile.co.uk) Received: from happy-idiot-talk.infracaninophile.co.uk (localhost [IPv6:::1] (may be forged))i8S88OAA050259 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 28 Sep 2004 09:08:24 +0100 (BST) (envelope-from matthew@happy-idiot-talk.infracaninophile.co.uk) Received: (from matthew@localhost)i8S88OWi050258; Tue, 28 Sep 2004 09:08:24 +0100 (BST) (envelope-from matthew) Date: Tue, 28 Sep 2004 09:08:24 +0100 From: Matthew Seaman To: Dan Langille Message-ID: <20040928080824.GB76460@happy-idiot-talk.infracaninophile.co.uk> Mail-Followup-To: Dan Langille , freebsd-vuxml@freebsd.org References: <20040927221759.N6886@xeon.unixathome.org> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="QTprm0S8XgL7H0Dt" Content-Disposition: inline In-Reply-To: <20040927221759.N6886@xeon.unixathome.org> User-Agent: Mutt/1.4.2.1i X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-1.5.6 (smtp.infracaninophile.co.uk [IPv6:::1]); Tue, 28 Sep 2004 09:08:25 +0100 (BST) X-Virus-Scanned: clamd / ClamAV version devel-20040904, clamav-milter version 0.75l on smtp.infracaninophile.co.uk X-Virus-Status: Clean X-Spam-Status: No, hits=-4.8 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=2.64 X-Spam-Checker-Version: SpamAssassin 2.64 (2004-01-11) on happy-idiot-talk.infracaninophile.co.uk cc: freebsd-vuxml@freebsd.org Subject: Re: VuXML entries found in FreshPorts X-BeenThere: freebsd-vuxml@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Documenting security issues in VuXML List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Sep 2004 08:08:30 -0000 --QTprm0S8XgL7H0Dt Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, Sep 27, 2004 at 11:13:28PM -0400, Dan Langille wrote: > The following URL lists the VuXML found in FreshPorts: >=20 > http://beta.freshports.org/vuxml.php?list > The more eyes that can check the results, the better. If you are familiar > with a particular vulnerability, I would appreciate feedback regarding the > accuracy. Here's one that I have a particular interest in. Compare 0d4c31ac-cb91-11d8-8898-000d6111a684 cc0fb686-6550-11d8-80e3-0020ed76ef5a The first isn't registered in http://beta.freshports.org/databases/phpmyadmin/ correctly, but the second is. Difference is the capitalisation: phpmyadmin vs. phpMyAdmin: the port may be databases/phpmyadmin, but the LATEST_LINK and the package name use phpMyAdmin. I guess that should be fixed in the vuln.xml for 0d4c31ac-cb91-11d8-8898-000d6111a684. Cheers, Matthew --=20 Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks Savill Way PGP: http://www.infracaninophile.co.uk/pgpkey Marlow Tel: +44 1628 476614 Bucks., SL7 1TH UK --QTprm0S8XgL7H0Dt Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.6 (FreeBSD) iD8DBQFBWRv4iD657aJF7eIRAqGWAJ4k0hB13jXGXjkGeYTVpwOz6qxb5gCff2hG sMNWtcZAWhiaz0icbqtH/Ig= =h8RB -----END PGP SIGNATURE----- --QTprm0S8XgL7H0Dt--