Author: joeyh Date: 2005-10-06 21:14:18 +0000 (Thu, 06 Oct 2005) New Revision: 2337 Modified: data/CAN/list Log: automatic CAN database update Modified: data/CAN/list ==================================================================--- data/CAN/list 2005-10-06 19:50:53 UTC (rev 2336) +++ data/CAN/list 2005-10-06 21:14:18 UTC (rev 2337) @@ -80,7 +80,6 @@ CAN-2005-3140 (Procom NetFORCE 800 4.02 M10 Build 20 and possibly other versions ...) NOT-FOR-US: Procom NetFORCE CAN-2005-3137 (The (1) cfmailfilter and (2) cfcron.in files for cfengine 1.6.5 allow ...) - {DSA-836-1 DSA-837-1} - cfengine <unfixed> (bug #332433) - cfengine2 <unfixed> (bug #332432) CAN-2005-3136 (Directory traversal vulnerability in Virtools Web Player 3.0.0.100 and ...) @@ -104,28 +103,39 @@ CAN-2005-3127 (Cross-site scripting (XSS) vulnerability in index.php in lucidCMS ...) NOT-FOR-US: lucidCMS CAN-2005-3126 + RESERVED NOTE: reserved CAN-2005-3125 + RESERVED NOTE: reserved CAN-2005-3124 + RESERVED NOTE: reserved CAN-2005-3123 + RESERVED NOTE: reserved CAN-2005-3122 + RESERVED NOTE: reserved CAN-2005-3121 + RESERVED NOTE: reserved CAN-2005-3120 + RESERVED NOTE: reserved CAN-2005-3119 + RESERVED NOTE: reserved CAN-2005-3118 + RESERVED + {DSA-845} NOTE: reserved - {DSA-845} - mason 1.0.0-3 CAN-2005-3117 + RESERVED NOTE: reserved CAN-2005-3116 + RESERVED NOTE: reserved CAN-2005-3115 (mpeg-tools before 1.5b-r2 creates multiple temporary files insecurely, ...) TODO: check, whether ucbmpeg-play from non-free is somehow related/affected