Author: micah Date: 2005-06-24 02:12:05 +0000 (Fri, 24 Jun 2005) New Revision: 1272 Modified: data/CAN/list Log: Finished my block Modified: data/CAN/list ==================================================================--- data/CAN/list 2005-06-24 01:47:59 UTC (rev 1271) +++ data/CAN/list 2005-06-24 02:12:05 UTC (rev 1272) @@ -248,46 +248,45 @@ NOTE: not-for-us (Actinic Catalog) CAN-2002-1731 (The System Request menu in IBM AS/400 allows local users to list valid ...) NOTE: not-for-us (IBM AS/400) -begin claimed by micah CAN-2002-1730 (ASPjar Guestbook 1.00 allows remote attackers to delete arbitrary ...) - TODO: check + NOTE: not-fot-us (ASPjar Guestbook) CAN-2002-1729 (Cross-site scripting vulnerability (XSS) in ASPjar Guestbook 1.00 ...) - TODO: check + NOTE: not-for-us (ASPjar Guestbook) CAN-2002-1728 (askSam Web Publisher 1.0 and 4.0 allows remote attackers to determine ...) - TODO: check + NOTE: not-for-us (askSam Web Publisher) CAN-2002-1727 (Cross-site scripting vulnerability (XSS) in (1) as_web.exe and (2) ...) - TODO: check + NOTE: not-for-us (askSam Web Publisher) CAN-2002-1726 (secure_inc.php in PhotoDB 1.4 allows remote attackers to bypass ...) - TODO: check + NOTE: not-for-us (PhotoDB) CAN-2002-1725 (phpimageview.php in PHPImageView 1.0 allows remote attackers to obtain ...) - TODO: check + NOTE: not-for-us (PHPImageView) CAN-2002-1724 (Cross-site scripting vulnerability (XSS) in phpimageview.php for ...) - TODO: check + NOTE: not-for-us (PHPImageView) CAN-2002-1723 (Powerboards 2.2b allows remote attackers to view the full path to the ...) - TODO: check + NOTE: not-for-us (Powerboards) CAN-2002-1722 (Logitech iTouch keyboards allows attackers with physical access to the ...) - TODO: check + NOTE: not-for-us (microsoft) CAN-2002-1721 (Off-by-one error in alterMIME 0.1.10 and 0.1.11 allows remote ...) - TODO: check + NOTE: not-for-us (alterMIME) + TODO: track RFP: #289546 CAN-2002-1720 (SQL injection vulnerability in Spooky Login 2.0 through 2.5 allows ...) - TODO: check + NOTE: not-for-us (Spooky Login) CAN-2002-1719 (Unknown vulnerability in Bavo 0.3 allows remote attackers to modify ...) - TODO: check + NOTE: not-for-us (Bavo) CAN-2002-1718 (Microsoft Internet Information Server (IIS) 5.1 may allow remote ...) - TODO: check + NOTE: not-for-us (microsoft) CAN-2002-1717 (Microsoft Internet Information Server (IIS) 5.1 allows remote ...) - TODO: check + NOTE: not-for-us (microsoft) CAN-2002-1716 (The Host() function in the Microsoft spreadsheet component on ...) - TODO: check + NOTE: not-for-us (microsoft) CAN-2002-1715 (SSH 1 through 3, and possibly other versions, allows local users to ...) TODO: check CAN-2002-1714 (Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to ...) - TODO: check + NOTE: not-for-us (microsoft) CAN-2002-1713 (The Standard security setting for Mandrake-Security package (msec) in ...) - TODO: check + NOTE: not-for-us (msec) CAN-2002-1712 (Microsoft Windows 2000 allows remote attackers to cause a denial of ...) - TODO: check -end claimed by micah + NOTE: not-for-us (microsoft) CAN-2002-1711 (BasiliX 1.1.0 saves attachments in a world readable /tmp/BasiliX ...) NOTE: not-for-us (BasiliX) CAN-2002-1710 (The attachment capability in Compose Mail in BasiliX Webmail 1.1.0 ...)