Author: joeyh
Date: 2007-02-13 09:14:13 +0100 (Tue, 13 Feb 2007)
New Revision: 5448
Modified:
data/CVE/list
Log:
automatic update
Modified: data/CVE/list
==================================================================---
data/CVE/list 2007-02-12 22:02:10 UTC (rev 5447)
+++ data/CVE/list 2007-02-13 08:14:13 UTC (rev 5448)
@@ -1,3 +1,91 @@
+CVE-2007-0895 (Race condition in recursive directory deletion with the (1) -r
or (2) ...)
+ TODO: check
+CVE-2007-0894 (MediaWiki before 1.9.2 allows remote attackers to obtain
sensitive ...)
+ TODO: check
+CVE-2007-0893 (Directory traversal vulnerability in phpMyVisites before 2.2
allows ...)
+ TODO: check
+CVE-2007-0892 (CRLF injection vulnerability in phpMyVisites before 2.2 allows
remote ...)
+ TODO: check
+CVE-2007-0891 (Cross-site scripting (XSS) vulnerability in the
GetCurrentCompletePath ...)
+ TODO: check
+CVE-2007-0890 (Cross-site scripting (XSS) vulnerability in scripts/passwdmysql
in ...)
+ TODO: check
+CVE-2007-0889 (Kiwi CatTools before 3.2.0 beta uses weak encryption
("reversible ...)
+ TODO: check
+CVE-2007-0888 (Directory traversal vulnerability in the TFTP server in Kiwi
CatTools ...)
+ TODO: check
+CVE-2007-0887 (axigen 1.2.6 through 2.0.0b1 does not properly parse login ...)
+ TODO: check
+CVE-2007-0886 (Heap-based buffer underflow in axigen 1.2.6 through 2.0.0b1
allows ...)
+ TODO: check
+CVE-2007-0885 (Cross-site scripting (XSS) vulnerability in ...)
+ TODO: check
+CVE-2007-0884 (Buffer overflow in Roaring Penguin MIMEDefang 2.59 and 2.60
allows ...)
+ TODO: check
+CVE-2007-0883 (Directory traversal vulnerability in ...)
+ TODO: check
+CVE-2007-0882 (The telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10
and ...)
+ TODO: check
+CVE-2007-0881 (PHP remote file inclusion vulnerability in the Seitenschutz
plugin for ...)
+ TODO: check
+CVE-2007-0880 (Capital Request Forms stores sensitive information under the web
root ...)
+ TODO: check
+CVE-2007-0879 (Buffer overflow in SmidgeonSoft PEBrowse Professional 8.2.1.0
allows ...)
+ TODO: check
+CVE-2007-0878 (Unspecified vulnerability in Microsoft Internet Explorer on
Windows ...)
+ TODO: check
+CVE-2007-0877 (Unspecified vulnerability in March Networks DVR 3000 and 4000
Digital ...)
+ TODO: check
+CVE-2007-0876 (Cross-site scripting (XSS) vulnerability in Quick Digital Image
...)
+ TODO: check
+CVE-2007-0875 (SQL injection vulnerability in install.php in mcRefer allows
remote ...)
+ TODO: check
+CVE-2007-0874 (Allons_voter 1.0 allows remote attackers to bypass
authentication and ...)
+ TODO: check
+CVE-2007-0873 (nabopoll 1.1.2 allows remote attackers to bypass authentication
and ...)
+ TODO: check
+CVE-2007-0872 (Directory traversal vulnerability in the Plain Old Webserver
(POW) ...)
+ TODO: check
+CVE-2007-0871 (Unrestricted file upload vulnerability in eXtremePow eXtreme
File ...)
+ TODO: check
+CVE-2006-7010 (The mosgetparam implementation in Joomla! before 1.0.10, does
not set ...)
+ TODO: check
+CVE-2006-7009 (Joomla! before 1.0.10 allows remote attackers to spoof the
frontend ...)
+ TODO: check
+CVE-2006-7008 (Unspecified vulnerability in Joomla! before 1.0.10 has unknown
impact ...)
+ TODO: check
+CVE-2006-7007 (Buffer overflow in Tiny FTPd 1.4 and earlier allows remote
attackers ...)
+ TODO: check
+CVE-2006-7006 (** DISPUTED ** ...)
+ TODO: check
+CVE-2006-7005 (SQL injection vulnerability in item.php in PSY Auction allows
remote ...)
+ TODO: check
+CVE-2006-7004 (Cross-site scripting (XSS) vulnerability in email_request.php in
PSY ...)
+ TODO: check
+CVE-2006-7003 (PHP remote file inclusion vulnerability in admin/index.php in
Fusion ...)
+ TODO: check
+CVE-2006-7002 (Cross-site scripting (XSS) vulnerability in add_comment.php in
...)
+ TODO: check
+CVE-2006-7001 (Directory traversal vulnerability in avatar.php in PhpMyChat
Plus 1.9 ...)
+ TODO: check
+CVE-2006-7000 (Headstart Solutions DeskPRO allows remote attackers to obtain
the full ...)
+ TODO: check
+CVE-2006-6999 (attachment.php in Headstart Solutions DeskPRO allows remote
attackers ...)
+ TODO: check
+CVE-2006-6998 (install/loader_help.php in Headstart Solutions DeskPRO allows
remote ...)
+ TODO: check
+CVE-2006-6997 (Unspecified vulnerability in a cryptographic feature in
MailEnable ...)
+ TODO: check
+CVE-2006-6996 (Multiple cross-site scripting (XSS) vulnerabilities in
warforge.NEWS ...)
+ TODO: check
+CVE-2006-6995 (mycontacts.php in V3 Chat allows remote authenticated users to
gain ...)
+ TODO: check
+CVE-2006-6994 (Unrestricted file upload vulnerability in add.asp in OzzyWork
Gallery, ...)
+ TODO: check
+CVE-2006-6993 (Multiple SQL injection vulnerabilities in pages/addcomment2.php
in ...)
+ TODO: check
+CVE-2005-4828 (Kolab Server 2.0.0 and 2.0.1 does not properly handle when a
large ...)
+ TODO: check
CVE-2007-XXXX [dokuwiki conf directory accessible by web users]
- dokuwiki 0.0.20061106-3 (bug #410557)
CVE-2007-0870 (Unspecified vulnerability in Microsoft Word 2000 allows remote
...)
@@ -238,8 +326,7 @@
RESERVED
CVE-2007-0771
RESERVED
-CVE-2007-0770 [graphicsmagick bogus second read in macro call]
- RESERVED
+CVE-2007-0770 (Buffer overflow in GraphicsMagick and ImageMagick allows
user-assisted ...)
- graphicsmagick 1.1.7-12
- imagemagick 7:6.2.4.5.dfsg1-0.14 (bug #410435)
CVE-2006-6982 (3proxy 0.5 to 0.5.2 does not offer NTLM authentication before
basic ...)
@@ -763,10 +850,12 @@
CVE-2007-0542 (Cross-site scripting (XSS) vulnerability in show.php in 212cafe
...)
NOT-FOR-US: 212cafe Guestbook
CVE-2007-0541 (WordPress allows remote attackers to determine the existence of
...)
+ {DTSA-33-1}
- wordpress 2.1.0-1 (low)
CVE-2007-0540 (WordPress allows remote attackers to cause a denial of service
...)
- wordpress 2.1.0-1 (low)
CVE-2007-0539 (WordPress before 2.1 allows remote attackers to cause a denial
of ...)
+ {DTSA-33-1}
- wordpress 2.1.0-1 (low)
CVE-2007-0538 (Telligent Community Server 2.1 and earlier allows remote
attackers to ...)
NOT-FOR-US: Telligent
@@ -1428,6 +1517,7 @@
CVE-2007-0263 (Unspecified vulnerability in Total Commander before 6.5.6 allows
...)
NOT-FOR-US: Total Commander
CVE-2007-0262 (WordPress 2.0.6, and 2.1Alpha 3 (SVN:4662), does not properly
verify ...)
+ {DTSA-33-1}
- wordpress <unfixed> (unimportant; bug #407289)
CVE-2007-0261 (snews.php in sNews 1.5.30 and earlier does not properly exit
when ...)
NOT-FOR-US: sNews
@@ -4628,7 +4718,7 @@
NOT-FOR-US: e107
CVE-2006-5785 (Unspecified vulnerability in SAP Web Application Server 6.40
before ...)
NOT-FOR-US: SAP Web Application Server
-CVE-2006-5784 (Unspecified vulnerability in SAP Web Application Server 6.40
before ...)
+CVE-2006-5784 (Unspecified vulnerability in enserver.exe in SAP Web Application
...)
NOT-FOR-US: SAP Web Application Server
CVE-2006-5783 (** DISPUTED ** ...)
NOTE: irreproducible firefox issue
@@ -12355,7 +12445,7 @@
NOT-FOR-US: Microsoft
CVE-2006-2377
RESERVED
-CVE-2006-2376 (Heap-based buffer overflow in the PolyPolygon function in
Graphics ...)
+CVE-2006-2376 (Integer overflow in the PolyPolygon function in Graphics
Rendering ...)
NOT-FOR-US: Microsoft
CVE-2006-2375
RESERVED
@@ -39043,7 +39133,7 @@
NOT-FOR-US: microsoft
CVE-2003-0231 (Microsoft SQL Server 7, 2000, and MSDE allows local or remote
...)
NOT-FOR-US: microsoft
-CVE-2003-0230 (Microsoft SQL Server 7, 2000, and MSDE allows local users go
gain ...)
+CVE-2003-0230 (Microsoft SQL Server 7, 2000, and MSDE allows local users to
gain ...)
NOT-FOR-US: microsoft
CVE-2003-0229
RESERVED