Author: joeyh
Date: 2006-11-21 21:14:42 +0100 (Tue, 21 Nov 2006)
New Revision: 4991
Modified:
data/CVE/list
Log:
automatic update
Modified: data/CVE/list
==================================================================---
data/CVE/list 2006-11-21 19:51:11 UTC (rev 4990)
+++ data/CVE/list 2006-11-21 20:14:42 UTC (rev 4991)
@@ -323,6 +323,7 @@
CVE-2006-5819 (Verity Ultraseek before 5.7 allows remote attackers to use the
server ...)
TODO: check
CVE-2006-5864 (Stack-based buffer overflow in the ps_gettext function in ps.c
for GNU ...)
+ {DSA-1214}
- gv 1:3.6.2-2 (medium; bug #398292)
CVE-2006-5818 (Multiple buffer overflows in tunekrnl in IBM Lotus Domino 6.x
before ...)
NOT-FOR-US: Lotus Domino
@@ -331,6 +332,7 @@
CVE-2006-5816 (Multiple PHP remote file inclusion vulnerabilities in Dmitry
Sheiko ...)
NOT-FOR-US: Business Card Web Builder
CVE-2006-5815 (Unspecified vulnerability in ProFTPD allows remote attackers to
...)
+ {DSA-1218}
- proftpd-dfsg 1.3.0-13 (bug #399070)
- proftpd <removed>
CVE-2006-5814 (Unspecified vulnerability in Novell eDirectory allows remote
attackers ...)
@@ -2511,14 +2513,17 @@
CVE-2006-4803 (The Fan-Out Linux and UNIX receiver scripts in Novell Identity
Manager ...)
NOT-FOR-US: Novell Identity Manager
CVE-2006-4802 (Format string vulnerability in the Real Time Virus Scan service
in ...)
+ {DSA-1216}
NOT-FOR-US: Symantec
CVE-2006-4801 (Race condition in Deja Vu, as used in Roxio Toast Titanium 7 and
...)
NOT-FOR-US: Roxio Toast
CVE-2006-4800 (Multiple buffer overflows in libavcodec in ffmpeg before ...)
+ {DSA-1215}
- ffmpeg 0.cvs20060329-1
- xine-lib 1.1.2-1
NOTE: according to the changelog, libxine (starting from 1.1.2-4) links
dynamically against ffmpeg
CVE-2006-4799 (Buffer overflow in ffmpeg for xine-lib before 1.1.2 might allow
...)
+ {DSA-1215}
- xine-lib 1.1.2-1 (bug #369876; medium)
NOTE: according to the changelog, libxine (starting from 1.1.2-4) links
dynamically against ffmpeg
TODO: check ffmpeg
@@ -2537,6 +2542,7 @@
CVE-2004-2665 (Unspecified vulnerability in the Address and Routing Parameter
Area ...)
NOT-FOR-US: HP-UX
CVE-2006-5778 (ftpd in linux-ftpd 0.17, and possibly other versions, performs a
chdir ...)
+ {DSA-1217}
- linux-ftpd 0.17-22 (low; bug #384454)
CVE-2006-XXXX [ejabberd HTML code injection]
- ejabberd 1.1.1-8