Author: stef-guest Date: 2007-01-16 20:57:30 +0100 (Tue, 16 Jan 2007) New Revision: 5274 Modified: data/CVE/list Log: - new gosa issue fixed - mediawiki fixed - phpbb2 fixed Modified: data/CVE/list ==================================================================--- data/CVE/list 2007-01-16 19:02:39 UTC (rev 5273) +++ data/CVE/list 2007-01-16 19:57:30 UTC (rev 5274) @@ -1,3 +1,5 @@ +CVE-2007-XXXX [gosa unspecified issue] + - gosa 2.5.8-1 CVE-2007-XXXX [Denial of Service Vulnerabilities] - squid 2.6.5-3 (low) TODO: check if version 2.5.9-10sarge2 have comprimised code. @@ -82,7 +84,7 @@ CVE-2007-0178 (PHP remote file inclusion vulnerability in info.php in Easy Banner Pro ...) NOT-FOR-US: Easy Banner Pro CVE-2007-0177 (Cross-site scripting (XSS) vulnerability in the AJAX module in ...) - - mediawiki <unfixed> (bug #406238; medium) + - mediawiki 1.7.1-6 (bug #406238; medium) NOTE: vendor advisory: http://sourceforge.net/forum/forum.php?forum_id=652721 CVE-2007-0176 (Cross-site scripting (XSS) vulnerability in search/advanced_search.php ...) TODO: check @@ -597,11 +599,11 @@ CVE-2006-6842 (SQL injection vulnerability in admin/admin_acronyms.php in the Acronym ...) NOT-FOR-US: Acronym Mod for phpBB2 CVE-2006-6841 (Certain forms in phpBB before 2.0.22 lack session checks, which has ...) - - phpbb2 <unfixed> (bug #405980) + - phpbb2 2.0.21-6 (bug #405980) CVE-2006-6840 (Unspecified vulnerability in phpBB before 2.0.22 has unknown impact ...) - - phpbb2 <unfixed> (bug #405980) + - phpbb2 2.0.21-6 (bug #405980) CVE-2006-6839 (Unspecified vulnerability in phpBB before 2.0.22 has unknown impact ...) - - phpbb2 <unfixed> (bug #405980) + - phpbb2 2.0.21-6 (bug #405980) CVE-2006-6838 (Rediff Bol Downloader ActiveX (OCX) control allows remote attackers to ...) NOT-FOR-US: Rediff Bol Downloader ActiveX (OCX) control CVE-2006-6837 (Multiple stack-based buffer overflows in the (1) LoadTree, (2) ...) @@ -1629,7 +1631,7 @@ CVE-2006-6422 (Agileco AgileBill 1.4.x and AgileVoice 1.4.x do not properly handle ...) NOT-FOR-US: AgileBill AgileVoice CVE-2006-6421 (Cross-site scripting (XSS) vulnerability in the private message box ...) - - phpbb2 <unfixed> (medium) + - phpbb2 2.0.21-6 (medium) [sarge] - phpbb2 <not-affected> CVE-2006-6420 (Multiple cross-site scripting (XSS) vulnerabilities in jce.php in the ...) NOT-FOR-US: Joomla Content Editor (JCE)