Author: jmm-guest
Date: 2006-07-24 18:37:04 +0000 (Mon, 24 Jul 2006)
New Revision: 4452
Modified:
data/CVE/list
Log:
php4 no-dsa
one of the ethereal issues doesn''t affect sarge
Modified: data/CVE/list
==================================================================---
data/CVE/list 2006-07-24 18:35:44 UTC (rev 4451)
+++ data/CVE/list 2006-07-24 18:37:04 UTC (rev 4452)
@@ -230,6 +230,7 @@
- ethereal <unfixed> (bug #378745; high)
CVE-2006-3627 (Unspecified vulnerability in the GSM BSSMAP dissector in
Wireshark ...)
- ethereal <unfixed> (bug #378745; high)
+ [sarge] - ethereal <no-dsa> (Vulnerable code not present)
CVE-2006-3625 (FLV Players 8 allows remote attackers to obtain sensitive
information ...)
NOT-FOR-US: FLV Players
CVE-2006-3624 (Multiple cross-site scripting (XSS) vulnerabilities in FLV
Players 8 ...)
@@ -5205,6 +5206,7 @@
CVE-2006-1494 (Directory traversal vulnerability in file.c in PHP 4.4.2 and
5.1.2 ...)
- php4 <unfixed> (bug #361855)
- php5 5.1.4-0.1 (bug #361916)
+ [sarge] - php4 <no-dsa> (open_basedir violations not supported)
CVE-2006-1493 (Cross-site scripting (XSS) vulnerability in dir.php in Explorer
XP ...)
NOT-FOR-US: Explorer XP
CVE-2006-1492 (Directory traversal vulnerability in dir.php in Explorer XP
allows ...)
@@ -12107,6 +12109,7 @@
CVE-2005-3390 (The RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x
up to ...)
- php4 4:4.4.2-1 (bug #336645; bug #354680; low)
- php5 5.1.1-1 (bug #336654; high)
+ [sarge] - php4 <no-dsa> (Operation with register_globals not supported)
NOTE: http://www.hardened-php.net/advisory_202005.79.html
NOTE: http://www.hardened-php.net/globals-problem
CVE-2005-3389 (The parse_str function in PHP 4.x up to 4.4.0 and 5.x up to
5.0.5, ...)
@@ -13214,6 +13217,7 @@
CVE-2005-3054 (fopen_wrappers.c in PHP 4.4.0, and possibly other versions, does
not ...)
- php4 4:4.4.0-3 (bug #353585; bug #354685; medium)
- php5 5.0.5-2 (bug #353585; medium)
+ [sarge] - php4 <no-dsa> (open_basedir violations not supported)
CVE-2005-3053 (The sys_set_mempolicy function in mempolicy.c in Linux kernel
2.6.x ...)
{DSA-1017-1}
- linux-2.6 2.6.12-3 (bug #330343; bug #330353; medium)