Author: joeyh
Date: 2010-12-08 09:14:58 +0000 (Wed, 08 Dec 2010)
New Revision: 15664
Modified:
data/CVE/list
Log:
automatic update
Modified: data/CVE/list
==================================================================---
data/CVE/list 2010-12-08 07:41:42 UTC (rev 15663)
+++ data/CVE/list 2010-12-08 09:14:58 UTC (rev 15664)
@@ -152,13 +152,17 @@
- openssl <unfixed>
TODO: check
CVE-2010-4334 [IO::Socket::SSL verify peer mode ignored if no cert supplied]
+ RESERVED
- libio-socket-ssl-perl <unfixed> (bug #606058)
CVE-2010-4335 [cakephp controller/component/security.php unsafe unserialize]
+ RESERVED
- cakephp <unfixed>
NOTE:
https://github.com/cakephp/cakephp/commit/e431e86aa4301ced4273dc7919b59362cbb353cb
CVE-2010-4336 [collectd: DoS in RRDtool and RRDCacheD plugins]
+ RESERVED
- collectd 4.10.1-2.1 (bug #605092; low)
CVE-2010-4337 [gnash: insecure temp files handling in configure script]
+ RESERVED
- gnash <unfixed> (unimportant; bug #605419)
CVE-2010-XXXX [php and NUL handling on file ops]
- php5 5.3.3-6 (low)
@@ -254,8 +258,10 @@
CVE-2009-5020 (Open redirect vulnerability in awredir.pl in AWStats before 6.95
...)
- awstats 6.9.5~dfsg-1
CVE-2010-4338 [ocrodjvu insecure temp files handling]
+ RESERVED
- ocrodjvu 0.4.6-2 (low; bug #598134)
CVE-2010-4339 [hypermail XSS]
+ RESERVED
- hypermail <removed> (low; bug #598743)
CVE-2010-4366 (Multiple cross-site scripting (XSS) vulnerabilities in ...)
TODO: check
@@ -1971,6 +1977,7 @@
{DSA-2113-1}
- drupal6 6.18-1 (low; bug #592716)
CVE-2010-4340 [libcloud doesn''t verify SSL certificate]
+ RESERVED
- libcloud <unfixed> (bug #598463)
CVE-2010-3688 (Directory traversal vulnerability in ADMIN/login.php in
NetArtMEDIA ...)
NOT-FOR-US: NetArtMEDIA WebSiteAdmin