Author: fw
Date: 2006-01-07 14:58:01 +0000 (Sat, 07 Jan 2006)
New Revision: 3244
Modified:
data/CVE/list
Log:
CVE-2005-4581, CVE-2005-4582: not really exploitable
CVE-2005-4534, CVE-2005-4268, CVE-2005-3973, CVE-2005-0866:
urgency adjusted
[clamav: DoS through multiple empty Content-Disposition header
lines]: likewise
CVE-2005-4154, CVE-2005-3883, CVE-2005-3392, CVE-2005-3391,
CVE-2005-3390, CVE-2005-3389, CVE-2005-3388, CVE-2005-3353,
CVE-2005-3319, CVE-2002-1954: php5 fixed
Modified: data/CVE/list
==================================================================---
data/CVE/list 2006-01-07 10:05:56 UTC (rev 3243)
+++ data/CVE/list 2006-01-07 14:58:01 UTC (rev 3244)
@@ -167,9 +167,12 @@
CVE-2005-4583 (Unspecified vulnerability in the Management Interface in VMware
ESX ...)
NOT-FOR-US: VMWare
CVE-2005-4582 (Electric Sheep 2.6.3 does not require authentication or
integrity ...)
- - electricsheep 2.6.3+cvs20051206-1
+ - electricsheep 2.6.3+cvs20051206-1 (unimportant)
+ NOTE: Even an authenticated server might serve unwanted content, so
+ NOTE: this can''t be considered a real vulnerability.
CVE-2005-4581 (Buffer overflow in Electric Sheep 2.6.3 client allows local
users to ...)
- - electricsheep 2.6.3+cvs20051206-1
+ - electricsheep 2.6.3+cvs20051206-1 (unimportant)
+ NOTE: This does not seem to be exploitable.
CVE-2005-4580 (Cross-site scripting (XSS) vulnerability in Day Communique 4
allows ...)
NOT-FOR-US: Day Communique
CVE-2005-4579 (Multiple HTTP response splitting vulnerabilities in Hitachi
Business ...)
@@ -385,8 +388,8 @@
CVE-2005-4534 (The shadow database feature (syncshadowdb) in Bugzilla 2.9
through ...)
- bugzilla 2.18 (bug #329387; low)
NOTE: The vulnerable script has been removed in the 2.18 upstream release
- [woody] - bugzilla <unfixed>
- [sarge] - bugzilla <unfixed>
+ [woody] - bugzilla <unfixed> (low)
+ [sarge] - bugzilla <unfixed> (low)
CVE-2005-XXXX [Insecure tempfile in libjpeg6b''s exifautotran]
- libjpeg6b 6b-11
[woody] - libjpeg6b <not-affected> (Does not include exifautotran)
@@ -846,9 +849,9 @@
CVE-2005-4269 (mshtml.dll in Microsoft Windows XP, Server 2003, and Internet
Explorer ...)
NOT-FOR-US: Microsoft Windows
CVE-2005-4268 (Buffer overflow in cpio 2.6-8.FC4 on 64-bit platforms, when
creating a ...)
- - cpio 2.6-10 (bug #344134)
- [sarge] - cpio <unfixed>
- [woody] - cpio <unfixed>
+ - cpio 2.6-10 (bug #344134; medium)
+ [sarge] - cpio <unfixed> (medium)
+ [woody] - cpio <unfixed> (medium)
CVE-2005-4267 (Stack-based buffer overflow in Qualcomm WorldMail 3.0 allows
remote ...)
NOT-FOR-US: Qualcomm WorldMail
CVE-2004-2652 (The DecodeTCPOptions function in decode.c in Snort before 2.3.0,
when ...)
@@ -1090,8 +1093,8 @@
CVE-2005-4155 (registration.PHP in ATutor 1.5.1 pl2 allows remote attackers to
...)
NOT-FOR-US: ATutor
CVE-2005-4154 (Unspecified vulnerability in PEAR installer 1.4.2 and earlier
allows ...)
- NOT-FOR-US: PEAR installer
- TODO: Please double-check, this could be included somewhere else
+ - php5 5.1.1-1
+ NOTE: PHP 5 in Debian is vulnerable according to the changelog.
CVE-2005-4153 (Mailman 2.1.4 through 2.1.6 allows remote attackers to cause a
denial ...)
- mailman 2.1.5-10
CVE-2005-4152 (Soti Pocket Controller-Professional 5.0 allows remote attackers
to ...)
@@ -1470,7 +1473,7 @@
- drupal 4.5.6-1 (low)
[sarge] - drupal <not-affected> (Only vulnerable if running PHP 5)
CVE-2005-3973 (Multiple cross-site scripting (XSS) vulnerabilities in Drupal
4.5.0 ...)
- - drupal 4.5.6-1 (unknown)
+ - drupal 4.5.6-1 (medium)
CVE-2005-3972 (Cross-site scripting (XSS) vulnerability in extremesearch.php in
...)
NOT-FOR-US: Extreme Search Corporate Edition
CVE-2005-3971 (Cross-site scripting (XSS) vulnerability in the login form in
Citrix ...)
@@ -1778,8 +1781,8 @@
CVE-2005-3884 (Multiple SQL injection vulnerabilities in the search action in
Zainu ...)
NOT-FOR-US: Zaimu
CVE-2005-3883 (CRLF injection vulnerability in the mb_send_mail function in PHP
...)
- - php5 <unfixed> (bug #341368; medium)
- php4 <unfixed> (bug #341726; medium)
+ - php5 5.1.1-1 (bug #341368; medium)
CVE-2005-3882 (SQL injection vulnerability in answer.php in FAQSystems FAQRing
...)
NOT-FOR-US: FAQRing Knowledge Base
CVE-2005-3881 (SQL injection vulnerability in search.php in AtlantisFAQ
Knowledge ...)
@@ -3306,27 +3309,27 @@
- openvpn 2.0.5-1 (bug #336751; medium)
CVE-2005-3392 (Unspecified vulnerability in PHP before 4.4.1, when using the
virtual ...)
- php4 <unfixed> (bug #336645; low)
- - php5 <unfixed> (bug #336654; low)
+ - php5 5.1.1-1 (bug #336654; low)
NOTE: According to CVE, this is a safe mode violation,
NOTE: therefore low impact. (According to SuSE, it''s an
NOTE: information leak.)
CVE-2005-3391 (Multiple vulnerabilities in PHP before 4.4.1 allow remote
attackers to ...)
- php4 <unfixed> (bug #336645; low)
- - php5 <unfixed> (bug #336654; low)
+ - php5 5.1.1-1 (bug #336654; low)
NOTE: This is a safe mode violation, therefore low impact.
CVE-2005-3390 (The RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x
up to ...)
- php4 <unfixed> (bug #336645; high)
- - php5 <unfixed> (bug #336654; high)
+ - php5 5.1.1-1 (bug #336654; high)
NOTE: http://www.hardened-php.net/advisory_202005.79.html
NOTE: http://www.hardened-php.net/globals-problem
CVE-2005-3389 (The parse_str function in PHP 4.x up to 4.4.0 and 5.x up to
5.0.5, ...)
- php4 <unfixed> (bug #336645; low)
- - php5 <unfixed> (bug #336654; low)
+ - php5 5.1.1-1 (bug #336654; low)
NOTE: http://www.hardened-php.net/advisory_192005.78.html
CVE-2005-3388 (Cross-site scripting (XSS) vulnerability in the phpinfo function
in ...)
{CVE-2002-1954}
- php4 <unfixed> (bug #336645; low)
- - php5 <unfixed> (bug #336654; low)
+ - php5 5.1.1-1 (bug #336654; low)
NOTE: http://www.hardened-php.net/advisory_182005.77.html
NOTE: fixed in CVS, estimated release of PHP5.1 to fix this issue
CVE-2005-3387 (The startup script in packages/RedHat/ntop.init in ntop before
3.2, ...)
@@ -3405,7 +3408,7 @@
- sylpheed-claws-gtk2 1.9.100-1 (bug #339529; medium)
CVE-2005-3353 (The exif_read_data function in the Exif module in PHP before
4.4.1 ...)
- php4 <unfixed> (bug #339577; medium)
- - php5 <unfixed> (bug #336654; medium)
+ - php5 5.1.1-1 (bug #336654; medium)
CVE-2005-3352 (Cross-site scripting (XSS) vulnerability in the mod_imap module
allows ...)
- apache 1.3.34-2 (bug #343466; low)
- apache2 <unfixed> (bug #343467; low)
@@ -3519,7 +3522,7 @@
NOT-FOR-US: SiteTurn Domain Manager
CVE-2005-3319 (The apache2handler SAPI (sapi_apache2.c) in the Apache module
...)
- php4 <unfixed> (bug #336004; low)
- - php5 <unfixed> (bug #336005; low)
+ - php5 5.1.1-1 (bug #336005; low)
CVE-2005-3318 (Buffer overflow in the _chm_decompress_block function in CHM lib
...)
{DSA-886-1}
- chmlib 0.37-1 (bug #335931; medium)
@@ -8146,7 +8149,7 @@
NOTE: function.
NOTE: fixed in CVS, estimated release of PHP5.1 to fix this issue
- php4 <unfixed> (bug #336645; low)
- - php5 <unfixed> (bug #336654; low)
+ - php5 5.1.1-1 (bug #336654; low)
CVE-2002-1953 (Heap-based buffer overflow in the goim handler of AOL Instant
...)
NOT-FOR-US: AIM
CVE-2002-1952 (phpRank 1.8 does not properly check the return codes for MySQL
...)
@@ -9993,7 +9996,7 @@
CVE-2003-1168 (HTTP Commander 4.0 allows remote attackers to obtain sensitive
...)
NOT-FOR-US: HTTP Commander
CVE-2005-XXXX [clamav: DoS through multiple empty Content-Disposition header
lines]
- - clamav 0.85.1-1
+ - clamav 0.85.1-1 (low)
CVE-2005-XXXX [libxpm4: new s_popen() function is insecure garbage]
- xfree86 4.3.0.dfsg.1-14 (bug #308783)
- xorg-x11 <not-affected> (Xfree-specific, inspected the Subversion
tree)
@@ -12581,7 +12584,7 @@
- linux-2.6 <not-affected> (Fixed before upload into archive)
[sarge] - kernel-source-2.6.8 <not-affected> (Not vulnerable, see
#306137)
CVE-2005-0866 (cdrecord before 4:2.0, when DEBUG is enabled, allows local users
to ...)
- - cdrtools 4:2.01+01a01-4 (bug #291376)
+ - cdrtools 4:2.01+01a01-4 (bug #291376; low)
NOTE: Sarge and Woody affected
CVE-2004-1771 (Scalable OGo (SOGo) 1.0 allows remote authenticated users to
bypass ...)
NOT-FOR-US: Scalable OGo (SOGo)