Author: jmm-guest Date: 2005-10-19 20:09:09 +0000 (Wed, 19 Oct 2005) New Revision: 2455 Modified: data/CAN/list Log: more corrections towards new data format Modified: data/CAN/list ==================================================================--- data/CAN/list 2005-10-19 15:34:46 UTC (rev 2454) +++ data/CAN/list 2005-10-19 20:09:09 UTC (rev 2455) @@ -4349,83 +4349,83 @@ CAN-2002-1894 (Cross-site scripting (XSS) vulnerability in viewtopic.php in phpBB ...) - phpbb2 <not-affected> (Debian package not vulnerable, see #316071, 316295) CAN-2002-1893 (Cross-site scripting (XSS) vulnerability in ArGoSoft Mail Server Pro ...) - NOTE: not-for-us + NOT-FOR-US: ArGoSoft Mail Server CAN-2002-1892 (NETGEAR FVS318 running firmware 1.1 stores the username and password ...) - NOTE: not-for-us + NOT-FOR-US: Netgear hardware CAN-2002-1891 (Buffer overflow in IRCIT 0.3.1 IRC client allows remote attackers to ...) - NOTE: not-for-us + NOT-FOR-US: IRCIT CAN-2002-1890 (rhmask 1.0-9 in Red Hat Linux 7.1 allows local users to overwrite ...) NOT-FOR-US: RedHat specific CAN-2002-1889 (Off-by-one buffer overflow in the context_action function in context.c ...) - NOTE: not-for-us + NOT-FOR-US: Logsurfer CAN-2002-1888 (CommonName Toolbar 3.5.2.0 sends unqualified domain name requests to ...) - NOTE: not-for-us + NOT-FOR-US: CommonName Toolbar CAN-2002-1887 (PHP remote code injection vulnerability in customize.php for ...) - NOTE: not-for-us + NOT-FOR-US: phpMyNewsletter CAN-2002-1886 (TightAuction 3.0 stores config.inc under the web document root with ...) - NOTE: not-for-us + NOT-FOR-US: TightAuction CAN-2002-1885 (PHP remote code injection vulnerability in showhits.php3 for ...) - NOTE: not-for-us + NOT-FOR-US: PPhlogger CAN-2002-1884 (index.php in Py-Membres 3.1 allows remote attackers to log in as an ...) - NOTE: not-for-us + NOT-FOR-US: Py-Membres CAN-2002-1883 (Trolltech Qt Assistant 1.0 in Trolltech Qt 3.0.3, when loaded from the ...) - qt-x11-free 2:3.0.4-1 CAN-2002-1882 (Unknown vulnerability in AolSecurityPrivate.class in Oracle E-Business ...) - NOTE: not-for-us + NOT-FOR-US: Oracle CAN-2002-1881 (Macromedia Flash Player 4.0 r12 through 6.0.47.0 allows remote ...) - flashplugin-nonfree 6.0.61.0-1 CAN-2002-1880 (LokwaBB 1.2.2 allows remote attackers to read arbitrary messages by ...) - NOTE: not-for-us + NOT-FOR-US: LokwaBB CAN-2002-1879 (SQL injection vulnerability in LokwaBB 1.2.2 allows remote attackers ...) - NOTE: not-for-us + NOT-FOR-US: LokwaBB CAN-2002-1878 (PHP remote code injection vulnerability in w-Agora 4.1.3 allows remote ...) - NOTE: not-for-us + NOT-FOR-US: w-Agora CAN-2002-1877 (NETGEAR FM114P allows remote attackers to bypass access restrictions ...) - NOTE: not-for-us + NOT-FOR-US: Netgear hardware CAN-2002-1876 (Microsoft Exchange 2000 allows remote authenticated attackers to cause ...) - NOTE: not-for-us + NOT-FOR-US: Microsoft CAN-2002-1875 (Entercept Agent 2.5 agent for Windows, released before May 21, 2002, ...) - NOTE: not-for-us + NOT-FOR-US: Entercept Agent CAN-2002-1874 (astrocam.cgi in AstroCam 1.7.1 through 2.1.2 allows remote attackers ...) - NOTE: not-for-us + NOT-FOR-US: Astrocam CAN-2002-1873 (Microsoft Exchange 2000, when used with Microsoft Remote Procedure ...) - NOTE: not-for-us + NOT-FOR-US: Microsoft CAN-2002-1872 (Microsoft SQL Server 6.0 through 2000, with SQL Authentication ...) - NOTE: not-for-us + NOT-FOR-US: Microsoft CAN-2002-1871 (pkgadd in Sun Solaris 2.5.1 through 8 installs files setuid/setgid ...) - NOTE: not-for-us + NOT-FOR-US: Solaris CAN-2002-1870 (Simple Web Server (SWS) 0.0.4 through 0.1.0 does not properly handle ...) - NOTE: not-for-us + NOT-FOR-US: Simple Web Server CAN-2002-1869 (Heysoft EventSave 5.1 and 5.2 and Heysoft EventSave+ 5.1 and 5.2 does ...) - NOTE: not-for-us + NOT-FOR-US: Heysoft EventSave CAN-2002-1868 (Dispair 0.1 and 0.2 allows remote attackers to execute arbitrary shell ...) - NOTE: not-for-us + NOT-FOR-US: Dispair CAN-2002-1867 (The default configuration of BizDesign ImageFolio 2.23 through 2.26 ...) - NOTE: not-for-us + NOT-FOR-US: ImageFolio CAN-2002-1866 (Simple Web Server (SWS) 0.0.4 through 0.1.0 does not close file ...) - NOTE: not-for-us + NOT-FOR-US: Simple Web Server CAN-2002-1865 (Buffer overflow in the Embedded HTTP server, as used in (1) D-Link ...) - NOTE: not-for-us + NOT-FOR-US: Embedded HTTP server CAN-2002-1864 (Directory traversal vulnerability in Simple Web Server (SWS) 0.0.4 ...) - NOTE: not-for-us + NOT-FOR-US: Simple Web Server CAN-2002-1863 (Iomega Network Attached Storage (NAS) A300U, and possibly other ...) - NOTE: not-for-us + NOT-FOR-US: Iomega NAS CAN-2002-1862 (SmartMail Server 2.0 allows remote attackers to cause a denial of ...) - NOTE: not-for-us + NOT-FOR-US: SmartMail Server CAN-2002-1861 (Sybase Enterprise Application Server 4.0, when running on Windows, ...) - NOTE: not-for-us + NOT-FOR-US: Sybase ASE CAN-2002-1860 (Pramati Server 3.0, when running on Windows, allows remote attackers ...) - NOTE: not-for-us + NOT-FOR-US: Pramati CAN-2002-1859 (Orion Application Server 1.5.3, when running on Windows, allows remote ...) - NOTE: not-for-us + NOT-FOR-US: Orion CAN-2002-1858 (Oracle Oracle9i Application Server 1.0.2.2 and 9.0.2 through ...) - NOTE: not-for-us + NOT-FOR-US: Oracle CAN-2002-1857 (jo! jo Webserver 1.0, when running on Windows, allows remote attackers ...) - NOTE: not-for-us + NOT-FOR-US: jo! jo Webserver CAN-2002-1856 (HP Application Server 8.0, when running on Windows, allows remote ...) - NOTE: not-for-us + NOT-FOR-US: HP Application Server CAN-2002-1855 (Macromedia JRun 3.0 through 4.0, when running on Windows, allows ...) - NOTE: not-for-us + NOT-FOR-US: Macromedia JRun CAN-2002-1854 (Rlaj whois CGI script (whois.cgi) 1.0 allows remote attackers to ...) NOTE: not-for-us CAN-2002-1853 (Cross-site scripting (XSS) vulnerability in MyNewsGroups 0.4 and 0.4.1 ...) @@ -4481,11 +4481,11 @@ CAN-2002-1828 (Savant Webserver 3.1 allows remote attackers to cause a denial of ...) NOTE: not-for-us CAN-2002-1827 (Sendmail 8.9.0 through 8.12.3 allows local users to cause a denial of ...) - NOT-FOR-US: Sendmail not in Debian before 8.13 + - sendmail 8.12-4 CAN-2002-1826 (grsecurity 1.9.4 for Linux kernel 2.4.18 allows local users to bypass ...) NOTE: kernel 2.4.18 CAN-2002-1825 (Format string vulnerability in PerlRTE_example1.pl in WASD 7.1, 7.2.0 ...) - NOT-FOR-US: WAD + NOT-FOR-US: WASD CAN-2002-1824 (Microsoft Internet Explorer 6.0, when handling an expired CA-CERT in a ...) NOT-FOR-US: MSIE CAN-2002-1823 (Buffer overflow in the HttpGetRequest function in Zeroo HTTP server ...)