Author: joeyh
Date: 2009-12-24 21:14:20 +0000 (Thu, 24 Dec 2009)
New Revision: 13644
Modified:
data/CVE/list
Log:
automatic update
Modified: data/CVE/list
==================================================================---
data/CVE/list 2009-12-24 19:52:52 UTC (rev 13643)
+++ data/CVE/list 2009-12-24 21:14:20 UTC (rev 13644)
@@ -1,4 +1,27 @@
+CVE-2009-4413
+ RESERVED
+CVE-2009-4412
+ RESERVED
+CVE-2009-4411
+ RESERVED
+CVE-2009-4409 (The (1) CHAP and (2) MS-CHAP-V2 authentication capabilities in
the PPP ...)
+ TODO: check
+CVE-2009-4408 (Multiple cross-site scripting (XSS) vulnerabilities in
models.parser ...)
+ TODO: check
+CVE-2009-4407 (Multiple cross-site request forgery (CSRF) vulnerabilities in
PyForum ...)
+ TODO: check
+CVE-2009-4406 (Cross-site scripting (XSS) vulnerability in Forms/login1 in
American ...)
+ TODO: check
+CVE-2009-4405 (Multiple unspecified vulnerabilities in Trac before 0.11.6 have
...)
+ TODO: check
+CVE-2009-4404 (Unspecified vulnerability in t-prot (TOFU Protection) before 2.8
...)
+ TODO: check
+CVE-2009-4403 (Cross-site scripting (XSS) vulnerability in index.php in Rumba
XML 1.8 ...)
+ TODO: check
+CVE-2009-4402 (The default configuration of SQL-Ledger 2.8.24 allows remote
attackers ...)
+ TODO: check
CVE-2009-4410 [linux-2.6: fuse dos]
+ RESERVED
- linux-2.6 2.6.32-1 (low)
[etch] - linux-2.6 <not-affected> (vulnerable code introduced in 2.6.29)
[lenny] - linux-2.6 <not-affected> (vulnerable code introduced in
2.6.29)
@@ -509,8 +532,7 @@
NOTE: Minor design issue
CVE-2009-XXXX [xpat2: save game permissions issue]
- xpat2 <unfixed> (unimportant; bug #560087)
-CVE-2009-4144 [network-manager-gnome: wpa2 authentication issue]
- RESERVED
+CVE-2009-4144 (NetworkManager (NM) 0.7.2 does not ensure that the configured
...)
- network-manager-applet <unfixed> (low; bug #560067)
CVE-2009-XXXX [unsafe xfs]
- xfs 1:1.0.8-6 (low; bug #521107)
@@ -817,8 +839,7 @@
TODO: check
CVE-2009-4146 (The _rtld function in the Run-Time Link-Editor (rtld) in ...)
TODO: check
-CVE-2009-4145 [nm-connection-editor information exposure]
- RESERVED
+CVE-2009-4145 (nm-connection-editor in NetworkManager (NM) 0.7.x exports
connection ...)
- network-manager-applet <unfixed>
TODO: check
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=546117
@@ -850,8 +871,8 @@
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=545439
CVE-2009-4134
RESERVED
-CVE-2009-4133
- RESERVED
+CVE-2009-4133 (Condor 6.5.4 through 7.2.4, 7.3.x, and 7.4.0, as used in MRG,
Grid for ...)
+ TODO: check
CVE-2009-4132
REJECTED
CVE-2009-4131 (The EXT4_IOC_MOVE_EXT (aka move extents) ioctl implementation in
the ...)
@@ -2436,16 +2457,16 @@
{DSA-1944-1}
- request-tracker3.4 <removed>
- request-tracker3.6 3.6.9-2 (low)
-CVE-2009-3584
- RESERVED
-CVE-2009-3583
- RESERVED
-CVE-2009-3582
- RESERVED
-CVE-2009-3581
- RESERVED
-CVE-2009-3580
- RESERVED
+CVE-2009-3584 (SQL-Ledger 2.8.24 does not set the secure flag for the session
cookie ...)
+ TODO: check
+CVE-2009-3583 (Directory traversal vulnerability in the Preferences menu item
in ...)
+ TODO: check
+CVE-2009-3582 (Multiple SQL injection vulnerabilities in the delete subroutine
in ...)
+ TODO: check
+CVE-2009-3581 (Multiple cross-site scripting (XSS) vulnerabilities in
SQL-Ledger ...)
+ TODO: check
+CVE-2009-3580 (Cross-site request forgery (CSRF) vulnerability in am.pl in
SQL-Ledger ...)
+ TODO: check
CVE-2009-3578 (Autodesk Maya 8.0, 8.5, 2008, 2009, and 2010 and Alias Wavefront
Maya ...)
NOT-FOR-US: Autodesk Maya
CVE-2009-3577 (Autodesk 3D Studio Max (3DSMax) 6 through 9 and 2008 through
2010 ...)