joeyh at alioth.debian.org
2008-Oct-02 09:14 UTC
[Secure-testing-commits] r9935 - data/CVE
Author: joeyh Date: 2008-10-02 09:14:11 +0000 (Thu, 02 Oct 2008) New Revision: 9935 Modified: data/CVE/list Log: automatic update Modified: data/CVE/list ==================================================================--- data/CVE/list 2008-10-02 08:51:29 UTC (rev 9934) +++ data/CVE/list 2008-10-02 09:14:11 UTC (rev 9935) @@ -1,7 +1,7 @@ CVE-2008-XXXX [linuxtrade: insecure temp file] - linuxtrade <removed> (unimportant; bug #496372) - NOTE: unimportant since the program is dysfunctional with the current - NOTE: trading website and thus not exploitable for practical purposes + NOTE: unimportant since the program is dysfunctional with the current + NOTE: trading website and thus not exploitable for practical purposes CVE-2008-XXXX [digitaldj: insecure temp file] - digitaldj 0.7.5-6.1 (low; bug #496399) [etch] - digitaldj <no-dsa> (Minor issue) @@ -611,7 +611,7 @@ NOT-FOR-US: Reciprocal Links Manager CVE-2008-4085 (Plait before 1.6 allows local users to overwrite arbitrary files via a ...) - plait 1.5.2-2 (low; bug #496381) - [etch] - plait <no-dsa> (Minor issue) + [etch] - plait <no-dsa> (Minor issue) CVE-2008-4084 (SQL injection vulnerability in staticpages/easyclassifields/index.php ...) NOT-FOR-US: MyioSoft EasyClassifields CVE-2008-4083 (Cross-site scripting (XSS) vulnerability in the Bookmarks plugin in ...) @@ -1393,7 +1393,7 @@ - ruby1.9 1.9.0.2-6 (bug #497610) CVE-2008-XXXX [apertium: insecure temp files] - apertium 3.0.7+1-1.1 (low; bug #496395) - [etch] - apertium <no-dsa> (Minor issue) + [etch] - apertium <no-dsa> (Minor issue) CVE-2008-XXXX [convirt: insecure temp files] - convirt <unfixed> (medium; bug #496419) CVE-2008-XXXX [audiolink: insecure temp files] @@ -1422,7 +1422,7 @@ - realtimebattle 1.0.8-8 (low; bug #496385) CVE-2008-XXXX [mgt: insecure temp file] - mgt 2.31-6 (low; bug #496434) - [etch] - mgt <no-dsa> (Minor issue) + [etch] - mgt <no-dsa> (Minor issue) CVE-2008-XXXX [twiki: insecure temp file] - twiki 1:4.1.2-4 (low; bug #494648) CVE-2008-XXXX [mafft: insecure temp file] @@ -1435,10 +1435,10 @@ - sympa 5.3.4-5.1 (low; bug #496405; bug #494969) CVE-2008-XXXX [sng: insecure temp file] - sng 1.0.2-6 (low; bug #496407) - [etch] - sng <no-dsa> (Minor issue) + [etch] - sng <no-dsa> (Minor issue) CVE-2008-XXXX [aview: insecure temp file] - aview 1.3.0rc1-8.1 (low; bug #496422) - [etch] - aview <no-dsa> (Minor issue) + [etch] - aview <no-dsa> (Minor issue) CVE-2008-XXXX [fwbuilder: insecure temp file] - fwbuilder 2.1.19-5 (low; bug #496406) CVE-2008-XXXX [feta: insecure temp file in to-upgrade plugin] @@ -1448,7 +1448,7 @@ NOTE: Not enabled by default, needs manual modification of a script CVE-2008-XXXX [cdcontrol: insecure temp file] - cdcontrol <removed> (low; bug #496438) - [etch] - cdcontrol <no-dsa> (Minor issue) + [etch] - cdcontrol <no-dsa> (Minor issue) CVE-2008-XXXX [sgml2x: insecure temp file] - sgml2x 1.0.0-11.2 (low; bug #496368) CVE-2008-XXXX [dtc-common: insecure temp file] @@ -1459,7 +1459,7 @@ - xmcd 2.6-21 (low; bug #496416) CVE-2008-XXXX [xcal: insecure temp file] - xcal 4.1-19 (low; bug #496393) - [etch] - xcal <no-dsa> (Minor issue) + [etch] - xcal <no-dsa> (Minor issue) CVE-2008-XXXX [r-base: insecure temp file] - r-base 2.7.2-1 (low; bug #496418) - r-base-core-ra 1.1.1-2 (low; bug #496363) @@ -4940,7 +4940,8 @@ RESERVED CVE-2008-2237 RESERVED -CVE-2008-2236 (Cross-site scripting (XSS) vulnerability in blosxom ...) +CVE-2008-2236 + RESERVED - blosxom <unfixed> (medium; bug #500873) CVE-2008-2235 (OpenSC before 0.11.5 uses weak permissions (ADMIN file control ...) {DSA-1627-2}