X-Git-Url: https://tinc-vpn.org/git/browse?a=blobdiff_plain;f=security.mdwn;fp=security.mdwn;h=1b10b3327ec61493f8978c3b30e6993162bb8e99;hb=c2157a3c17003b0bc020987b5bcd104997c72b7b;hp=d6cdea0ae4aa78661faf75ad666e8f4c028ba129;hpb=284b410a18a252cc4a1346e556f3515b1e994922;p=wiki

diff --git a/security.mdwn b/security.mdwn
index d6cdea0..1b10b33 100644
--- a/security.mdwn
+++ b/security.mdwn
@@ -2,11 +2,13 @@
 
 The following list contains advisories for security issues in tinc in old versions:
 
-- [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1428](CVE-2013-1428):
+- [CVE-2013-1428](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1428):
   to be published.
-- [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1755](CVE-2002-1755):
+
+- [CVE-2002-1755](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1755):
   tinc 1.0pre3 and 1.0pre4 VPN do not authenticate forwarded packets, which allows remote attackers to inject data into user sessions without detection, and possibly control the data contents via cut-and-paste attacks on CBC. 
-- [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1505](CVE-2001-1505):
+
+- [CVE-2001-1505](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1505):
   tinc 1.0pre3 and 1.0pre4 allow remote attackers to inject data into user sessions by sniffing and replaying packets. 
 
 ## Possible weak keys generated by tinc on Debian (and derivates) due to a security bug in Debian's OpenSSL packages