Author: jmm-guest
Date: 2006-10-09 16:47:49 +0000 (Mon, 09 Oct 2006)
New Revision: 4831
Modified:
data/CVE/list
Log:
several no-dsa and bugnums
Modified: data/CVE/list
==================================================================---
data/CVE/list 2006-10-07 12:04:07 UTC (rev 4830)
+++ data/CVE/list 2006-10-09 16:47:49 UTC (rev 4831)
@@ -1,7 +1,7 @@
CVE-2006-XXXX [zabbix format string vulnerabilities]
- - zabbix 1:1.1.2-4
+ - zabbix 1:1.1.2-4 (bug #391388)
CVE-2006-XXXX [zabbix buffer overflows]
- - zabbix 1:1.1.2-4
+ - zabbix 1:1.1.2-4 (bug #391388)
CVE-2006-5167 (Multiple PHP remote file inclusion vulnerabilities in BasiliX
1.1.1 ...)
NOT-FOR-US: BasiliX
CVE-2006-5166 (PHP remote file inclusion vulnerability in functions.php in PHP
Web ...)
@@ -1937,6 +1937,7 @@
NOT-FOR-US: cPanel
CVE-2006-4292 (Unspecified vulnerability in Niels Provos Honeyd before 1.5b
allows ...)
- honeyd <unfixed> (low; bug #384806)
+ [sarge] - honeyd <no-dsa> (Minor issue)
CVE-2006-4291 (PHP remote file inclusion vulnerability in ...)
NOT-FOR-US: PHlyMail Lite
CVE-2006-4290 (Directory traversal vulnerability in Sony VAIO Media Server 2.x,
3.x, ...)
@@ -5013,8 +5014,10 @@
NOT-FOR-US: CMPro
CVE-2006-2920 (Sylpheed-Claws before 2.2.2 and Sylpheed before 2.2.6 allow
remote ...)
- sylpheed 2.2.6-1 (low)
+ [sarge] - sylpheed <no-dsa> (Minor evasion of phishing protection
feature)
- sylpheed-gtk1 1.0.6-3 (bug #373187; low)
- sylpheed-claws 1.0.5-3 (bug #372891; low)
+ [sarge] - sylpheed-claws <no-dsa> (Minor evasion of phishing protection
feature)
- sylpheed-claws-gtk2 2.3.0-1 (bug #372889; low)
CVE-2006-2919 (Unspecified vulnerability in Microsoft NetMeeting 3.01 allows
remote ...)
NOT-FOR-US: Microsoft
@@ -5700,10 +5703,10 @@
- wordpress 2.0.3-1 (high; bug #369014)
CVE-2006-2753 (SQL injection vulnerability in MySQL 4.1.x before 4.1.20 and
5.0.x ...)
{DSA-1092-1}
- - mysql-dfsg <not-affected> (Vulnerable code was introduced in 4.1)
- - mysql <not-affected> (Vulnerable code was introduced in 4.1)
+ - mysql-dfsg <not-affected> (Vulnerable code was introduced in 4.1, see
#369741)
+ - mysql <not-affected> (Vulnerable code was introduced in 4.1, see
#369754)
- mysql-dfsg-5.0 5.0.22-1 (bug #369735; medium)
- - mysql-dfsg-4.1 <unfixed> (medium)
+ - mysql-dfsg-4.1 <unfixed> (bug #369754; medium)
CVE-2006-2659 (libs/comverp.c in Courier MTA before 0.53.2 allows attackers to
cause ...)
{DSA-1101}
- courier 0.53.2-1 (bug #368834)
@@ -10221,6 +10224,7 @@
NOT-FOR-US: Kadu
CVE-2006-0767 (CGIWrap before 3.10 allows remote attackers to obtain sensitive
...)
- cgiwrap 3.9-3.1
+ [sarge] - cgiwrap <no-dsa> (Only leaks information about the existance
of users on a system)
CVE-2006-0766 (ICQ Inc. (formerly Mirabilis) ICQ 2003a, 2003b, Lite 4.0, Lite
4.1, ...)
NOT-FOR-US: ICQ
CVE-2006-0765 (GUI display truncation vulnerability in ICQ Inc. (formerly
Mirabilis) ...)
@@ -15879,6 +15883,7 @@
NOTE:
http://www.kernel.org/git/?p=linux/kernel/git/chrisw/linux-2.6.12.y.git;a=commit;h=4717ecd49ce5c556d38e8c7b6fdc9fac5d35c00e
CVE-2005-XXXX [Insecure temp file usage in thttpd''s syslogtocern]
- thttpd 2.23beta1-4 (low)
+ [sarge] - thttpd <no-dsa> (Minor issue in addon package)
CVE-2005-3301 (Multiple cross-site scripting (XSS) vulnerabilities in
phpMyAdmin ...)
{DSA-880-1}
- phpmyadmin 4:2.6.4-pl3-1 (bug #335513; medium)
@@ -18564,6 +18569,7 @@
- sysklogd <unfixed> (bug #281448; unimportant)
CVE-2005-XXXX [fftw3-dev: Insecure tempfile usage in fftw-wisdom-to-conf
script]
- fftw3 3.0.1-12 (low; bug #321566)
+ [sarge] - fftw3 <no-dsa> (Minor issue)
CVE-2005-XXXX [clamav-getfile: Insecure use of temporary files]
- clamav-getfiles 0.5-1 (bug #321446; medium)
[sarge] - clamav-getfiles <not-affected> (Sarge version uses mktemp)
@@ -19800,8 +19806,9 @@
NOTE: the affected probe.cgi
CVE-2005-2177 (Unknown vulnerability in Net-SNMP 5.0.x before 5.0.10.2, 5.2.x
before ...)
{DSA-873-1}
- - net-snmp 5.2.1.2-1 (bug #318420; medium)
- - ucd-snmp 4.2.5-5.1 (bug #337394; medium)
+ - net-snmp 5.2.1.2-1 (bug #318420; low)
+ - ucd-snmp 4.2.5-5.1 (bug #337394; low)
+ [sarge] - ucd-snmp <no-dsa> (Minor issue)
CVE-2005-2176 (Novell NetMail automatically processes HTML in an attachment
without ...)
NOT-FOR-US: Novell NetMail
CVE-2005-2175 (The web interface for Lotus Notes mail automatically processes
HTML in ...)