Secure testing commits - Oct 2007 - r6910 - data/CVE

Author: joeyh
Date: 2007-10-11 21:14:06 +0000 (Thu, 11 Oct 2007)
New Revision: 6910

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
==================================================================---
data/CVE/list	2007-10-11 20:39:32 UTC (rev 6909)
+++ data/CVE/list	2007-10-11 21:14:06 UTC (rev 6910)
@@ -1,3 +1,39 @@
+CVE-2007-5375 (Interpretation conflict in the Sun Java Virtual Machine (JVM)
allows ...)
+	TODO: check
+CVE-2007-5374 (cp_memberedit.php in LightBlog 8.4.1.1 does not check for ...)
+	TODO: check
+CVE-2007-5373 (ldapscripts 1.4 and 1.7 sends a password as a command line
argument ...)
+	TODO: check
+CVE-2007-5372 (Multiple SQL injection vulnerabilities in (a) LedgerSMB 1.0.0
through ...)
+	TODO: check
+CVE-2007-5371 (Multiple SQL injection vulnerabilities in
mutate_content.dynamic.php ...)
+	TODO: check
+CVE-2007-5370 (Multiple cross-site scripting (XSS) vulnerabilities in ...)
+	TODO: check
+CVE-2007-5369 (The GetMagicNumberString function in Massive Entertainment World
in ...)
+	TODO: check
+CVE-2007-5368 (Multiple unspecified vulnerabilities in labeld in Trusted
Extensions ...)
+	TODO: check
+CVE-2007-5367 (Unspecified vulnerability in the Virtual File System (VFS) in
Sun ...)
+	TODO: check
+CVE-2007-5366 (The Tomcat 4.1-based Servlet Service in Fujitsu Interstage
Application ...)
+	TODO: check
+CVE-2007-5365 (Stack-based buffer overflow in the cons_options function in
options.c ...)
+	TODO: check
+CVE-2007-5364 (** DISPUTED ** ...)
+	TODO: check
+CVE-2007-5363 (PHP remote file inclusion vulnerability in admin.panoramic.php
in the ...)
+	TODO: check
+CVE-2007-5362 (Multiple PHP remote file inclusion vulnerabilities in the
Avant-Garde ...)
+	TODO: check
+CVE-2007-5361
+	RESERVED
+CVE-2007-5360
+	RESERVED
+CVE-2007-5359
+	RESERVED
+CVE-2007-5358
+	RESERVED
 CVE-2007-5357
 	RESERVED
 CVE-2007-5356
@@ -66,8 +102,8 @@
 	RESERVED
 CVE-2007-5324
 	RESERVED
-CVE-2007-5323
-	RESERVED
+CVE-2007-5323 (The RepliStor Server Service in EMC Replistor 6.1.3 allows
remote ...)
+	TODO: check
 CVE-2007-5322 (The FPOLE.OCX 6.0.8450.0 ActiveX control in Microsoft Visual
FoxPro ...)
 	NOT-FOR-US: Microsoft Visual FoxPro
 CVE-2007-5321 (Directory traversal vulnerability in index.php in Verlihub
Control ...)
@@ -545,8 +581,8 @@
 	NOT-FOR-US: Quicksilver Forums
 CVE-2007-5170 (Unspecified vulnerability in the embedded service processor (SP)
...)
 	NOT-FOR-US: Sun Fire
-CVE-2007-5169
-	RESERVED
+CVE-2007-5169 (Stack-based buffer overflow in MAIPM6.dll in Adobe PageMaker
7.0.1 and ...)
+	TODO: check
 CVE-2007-5168 (Multiple PHP remote file inclusion vulnerabilities in ClanLite
...)
 	NOT-FOR-US: Clan lite
 CVE-2007-5167 (PHP remote file inclusion vulnerability in
.systeme/fonctions.php in ...)
@@ -945,8 +981,8 @@
 	{DSA-1384-1}
 	- xen-3 <unfixed> (medium; bug #444430)
 	- xen-3.0 <removed>
-CVE-2007-4992
-	RESERVED
+CVE-2007-4992 (Stack-based buffer overflow in the process_packet function in
...)
+	TODO: check
 CVE-2007-4991 (The SOCKS4 Proxy in Microsoft Internet Security and Acceleration
(ISA) ...)
 	NOT-FOR-US: Microsoft Internet Security and Acceleration
 CVE-2007-4990 (The swap_char2b function in X.Org X Font Server (xfs) before
1.0.5 ...)
@@ -3366,8 +3402,7 @@
 CVE-2007-3918 (Cross-site scripting (XSS) vulnerability in account/verify.php
in ...)
 	{DSA-1383-1}
 	- gforge 4.6.99+svn6094-1
-CVE-2007-3917
-	RESERVED
+CVE-2007-3917 (Unspecified vulnerability in the multiplayer engine in Wesnoth
before ...)
 	- wesnoth 1.2.7-1
 CVE-2007-3916 (The main function in skkdic-expr.c in SKK Tools 1.2 allows local
users ...)
 	- skktools 1.2+0.20061004-3
@@ -3410,10 +3445,10 @@
 	TODO: check
 CVE-2007-3898
 	RESERVED
-CVE-2007-3897 (Unspecified vulnerability in Microsoft Outlook Express 6 and
earlier, ...)
+CVE-2007-3897 (Heap-based buffer overflow in Microsoft Outlook Express 6 and
earlier, ...)
 	TODO: check
-CVE-2007-3896
-	RESERVED
+CVE-2007-3896 (The URL handling in Windows XP and Windows Server 2003, with
Windows ...)
+	TODO: check
 CVE-2007-3895
 	RESERVED
 CVE-2007-3894