Author: joeyh
Date: 2009-08-28 21:14:17 +0000 (Fri, 28 Aug 2009)
New Revision: 12700
Modified:
data/CVE/list
Log:
automatic update
Modified: data/CVE/list
==================================================================---
data/CVE/list 2009-08-28 11:58:52 UTC (rev 12699)
+++ data/CVE/list 2009-08-28 21:14:17 UTC (rev 12700)
@@ -1,3 +1,83 @@
+CVE-2009-2999
+ RESERVED
+CVE-2009-2998
+ RESERVED
+CVE-2009-2997
+ RESERVED
+CVE-2009-2996
+ RESERVED
+CVE-2009-2995
+ RESERVED
+CVE-2009-2994
+ RESERVED
+CVE-2009-2993
+ RESERVED
+CVE-2009-2992
+ RESERVED
+CVE-2009-2991
+ RESERVED
+CVE-2009-2990
+ RESERVED
+CVE-2009-2989
+ RESERVED
+CVE-2009-2988
+ RESERVED
+CVE-2009-2987
+ RESERVED
+CVE-2009-2986
+ RESERVED
+CVE-2009-2985
+ RESERVED
+CVE-2009-2984
+ RESERVED
+CVE-2009-2983
+ RESERVED
+CVE-2009-2982
+ RESERVED
+CVE-2009-2981
+ RESERVED
+CVE-2009-2980
+ RESERVED
+CVE-2009-2979
+ RESERVED
+CVE-2009-2978 (SQL injection vulnerability in SugarCRM 4.5.1o and earlier,
5.0.0k and ...)
+ TODO: check
+CVE-2009-2977 (The Cisco Security Monitoring, Analysis and Response System
(CS-MARS) ...)
+ TODO: check
+CVE-2009-2976 (Cisco Aironet Lightweight Access Point (AP) devices send the
contents ...)
+ TODO: check
+CVE-2009-2975 (Mozilla Firefox 3.5.2 on Windows XP, in some situations possibly
...)
+ TODO: check
+CVE-2009-2974 (Google Chrome 1.0.154.65, 1.0.154.48, and earlier allows remote
...)
+ TODO: check
+CVE-2009-2973 (Google Chrome before 2.0.172.43 does not prevent SSL connections
to a ...)
+ TODO: check
+CVE-2009-2972 (in.lpd in the print service in Sun Solaris 8 and 9 allows remote
...)
+ TODO: check
+CVE-2008-7106 (The installation of Sophos PureMessage for Microsoft Exchange
3.0 ...)
+ TODO: check
+CVE-2008-7105 (Sophos PureMessage for Microsoft Exchange 3.0 before 3.0.2
allows ...)
+ TODO: check
+CVE-2008-7104 (Sophos PureMessage Scanner service (PMScanner.exe) in
PureMessage for ...)
+ TODO: check
+CVE-2008-7103 (Stack-based buffer overflow in an ActiveX control in ...)
+ TODO: check
+CVE-2008-7102 (DotNetNuke 2.0 through 4.8.4 allows remote attackers to load
.ascx ...)
+ TODO: check
+CVE-2008-7101 (Unspecified vulnerability in DotNetNuke 4.0 through 4.8.4 and
5.0 ...)
+ TODO: check
+CVE-2008-7100 (Unspecified vulnerability in DotNetNuke 4.4.1 through 4.8.4
allows ...)
+ TODO: check
+CVE-2008-7099 (Unspecified vulnerability in the Manage Templates feature in
Qsoft ...)
+ TODO: check
+CVE-2008-7098 (Multiple cross-site scripting (XSS) vulnerabilities in Qsoft
K-Rate ...)
+ TODO: check
+CVE-2008-7097 (Multiple SQL injection vulnerabilities in Qsoft K-Rate Premium
allow ...)
+ TODO: check
+CVE-2008-7096 (Intel Desktop and Intel Mobile Boards with BIOS firmware DQ35JO,
...)
+ TODO: check
+CVE-2008-7095 (The SNMP daemon in ArubaOS 3.3.2.6 in Aruba Mobility Controller
does ...)
+ TODO: check
CVE-2009-2971
RESERVED
CVE-2009-2970
@@ -154,8 +234,8 @@
RESERVED
CVE-2009-2936
RESERVED
-CVE-2009-2935
- RESERVED
+CVE-2009-2935 (Google V8, as used in Google Chrome before 2.0.172.43, allows
remote ...)
+ TODO: check
CVE-2009-2934 (Multiple stack-based buffer overflows in xaudio.dll in
Programmed ...)
NOT-FOR-US: Programmed Integration PIPL
CVE-2009-2933 (SQL injection vulnerability in comments.php in Piwigo before
2.0.3 ...)
@@ -397,8 +477,8 @@
RESERVED
CVE-2009-2862
RESERVED
-CVE-2009-2861
- RESERVED
+CVE-2009-2861 (The Over-the-Air Provisioning (OTAP) functionality on Cisco
Aironet ...)
+ TODO: check
CVE-2009-2860 (Unspecified vulnerability in db2jds in IBM DB2 8.1 before FP18
allows ...)
NOT-FOR-US: db2jds in IBM DB2
CVE-2009-2859 (IBM DB2 8.1 before FP18 allows attackers to obtain unspecified
access ...)
@@ -1048,8 +1128,7 @@
RESERVED
CVE-2009-2699
RESERVED
-CVE-2009-2698 [linux-2.6: privilege escalation via udp socket null ptr
dereference]
- RESERVED
+CVE-2009-2698 (The UDP implementation in (1) net/ipv4/udp.c and (2)
net/ipv6/udp.c in ...)
{DSA-1872-1}
- linux-2.6 2.6.19-1 (high)
- linux-2.6.24 2.6.19-1
@@ -1184,12 +1263,12 @@
CVE-2009-2664 (The js_watch_set function in js/src/jsdbgapi.cpp in the
JavaScript ...)
- xulrunner <unfixed>
[etch] - xulrunner <no-dsa> (Mozilla packages from oldstable no longer
covered by security support)
-CVE-2009-2663 (libvorbis before r16182, as used in Mozilla Firefox before
3.0.13 and ...)
+CVE-2009-2663 (libvorbis before r16182, as used in Mozilla Firefox 3.5.x before
3.5.2 ...)
- libvorbis 1.2.0.dfsg-6 (medium; bug #540958)
- xulrunner <not-affected> (medium; bug #540961)
NOTE: vorbis support added in 1.9.0.13 and 1.9.1.0, which have not yet entered
the archive
TODO: recheck when 1.9.0.13 or 1.9.1.x enter stable/unstable
-CVE-2009-2662 (The browser engine in Mozilla Firefox before 3.0.13, and 3.5.x
before ...)
+CVE-2009-2662 (The browser engine in Mozilla Firefox 3.5.x before 3.5.2 allows
remote ...)
- xulrunner <unfixed>
[etch] - xulrunner <no-dsa> (Mozilla packages from oldstable no longer
covered by security support)
CVE-2009-2661 (The asn1_length function in strongSwan 2.8 before 2.8.11, 4.2
before ...)
@@ -2853,16 +2932,16 @@
NOT-FOR-US: Cisco
CVE-2009-2055 (Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to
cause a ...)
NOT-FOR-US: Cisco IOS
-CVE-2009-2054
- RESERVED
-CVE-2009-2053
- RESERVED
-CVE-2009-2052
- RESERVED
-CVE-2009-2051
- RESERVED
-CVE-2009-2050
- RESERVED
+CVE-2009-2054 (Cisco Unified Communications Manager (aka CUCM, formerly
CallManager) ...)
+ TODO: check
+CVE-2009-2053 (Cisco Unified Communications Manager (aka CUCM, formerly
CallManager) ...)
+ TODO: check
+CVE-2009-2052 (Cisco Unified Communications Manager (aka CUCM, formerly
CallManager) ...)
+ TODO: check
+CVE-2009-2051 (Cisco Unified Communications Manager (aka CUCM, formerly
CallManager) ...)
+ TODO: check
+CVE-2009-2050 (Cisco Unified Communications Manager (aka CUCM, formerly
CallManager) ...)
+ TODO: check
CVE-2009-2049 (Cisco IOS 12.0(32)S12 through 12.0(32)S13 and 12.0(33)S3 through
...)
NOT-FOR-US: Cisco IOS
CVE-2009-2048 (Cross-site scripting (XSS) vulnerability in the Administration
...)
@@ -14754,7 +14833,7 @@
CVE-2008-3950 (Off-by-one error in the ...)
- webkit <not-affected> (Vulnerable code not present)
NOTE: bug #500306
-CVE-2008-3949 (Emacs 22.1 and 22.2 imports Python script from the current
working ...)
+CVE-2008-3949 (emacs/lisp/progmodes/python.el in Emacs 22.1 and 22.2 imports
Python ...)
- emacs22 22.2+2-4 (low; bug #499568)
- emacs21 <not-affected> (doesn''t provide the python
functionality)
- xemacs21 <not-affected> (doesn''t provide the python
functionality)