Author: joeyh Date: 2005-03-03 22:25:59 +0100 (Thu, 03 Mar 2005) New Revision: 518 Modified: sarge-checks/CAN/list Log: processed my block Modified: sarge-checks/CAN/list ==================================================================--- sarge-checks/CAN/list 2005-03-03 21:04:33 UTC (rev 517) +++ sarge-checks/CAN/list 2005-03-03 21:25:59 UTC (rev 518) @@ -14,55 +14,56 @@ NOTE: not-for-us (Einstein) CAN-2005-0619 (Einstein 1.0.1 stores sensitive information such as usernames and ...) NOTE: not-for-us (Einstein) -begin claimed by joeyh CAN-2005-0618 (The SMTP binding function in Symantec Firewall/VPN Appliance 200/200R ...) - TODO: check + NOTE: not-for-us (Symantec Firewall/VPN Appliance 200/200R firmware) CAN-2005-0617 (SQL injection vulnerability in dl-search.php in PostNuke 0.750 and ...) - TODO: check + NOTE: not-for-us (PostNuke) CAN-2005-0616 (Multiple cross-site scripting (XSS) vulnerabilities in the Download ...) - TODO: check + NOTE: not-for-us (PostNuke) CAN-2005-0615 (Multiple SQL injection vulnerabilities in (1) index.php, (2) ...) - TODO: check + NOTE: not-for-us (PostNuke) CAN-2005-0614 (sessions.php in phpBB 2.0.12 and earlier allows remote attackers to ...) - TODO: check + - phpbb2 2.0.13-1 CAN-2005-0613 (Unknown vulnerability in FCKeditor 2.0 RC2, when used with PHP-Nuke, ...) - TODO: check + NOTE: not-for-us (FCKeditor) CAN-2005-0612 (Cisco IP/VC Videoconferencing System 3510, 3520, 3525 and 3530 contain ...) - TODO: check + NOTE: not-for-us (Cisco) CAN-2005-0611 (Heap-based buffer overflow in RealNetworks RealPlayer 10.5 ...) - TODO: check + NOTE: not-for-us (Real) CAN-2005-0610 NOTE: reserved CAN-2005-0609 NOTE: reserved CAN-2005-0608 (Heap-based buffer overflow in server.cpp for WebMod 0.47 allows remote ...) - TODO: check + NOTE: not-for-us (Half Life WebMod) CAN-2005-0607 (CubeCart 2.0.0 through 2.0.5 allows remote attackers to determine the ...) - TODO: check + NOTE: not-for-us (CubeCert) CAN-2005-0606 (Cross-site scripting (XSS) vulnerability in settings.inc.php for ...) - TODO: check + NOTE: not-for-us (CubeCert) CAN-2005-0605 NOTE: reserved CAN-2005-0604 (lnss.exe in GFI Languard Network Security Scanner 5.0 stores the ...) - TODO: check + NOTE: not-for-us (GFI Languard Network Security Scanner) CAN-2005-0603 (viewtopic.php in phpBB 2.0.12 and earlier allows remote attackers to ...) - TODO: check + - phpbb2 2.0.13-1 CAN-2005-0602 (Unzip 5.51 and earlier does not properly warn the user when extracting ...) - TODO: check + - unzip 5.52-1 + NOTE: um, tar does this too, not really considered a security hole CAN-2005-0601 (Cisco devices running Application and Content Networking System (ACNS) ...) - TODO: check + NOTE: not-for-us (Cisco) CAN-2005-0600 (Cisco devices running Application and Content Networking System (ACNS) ...) - TODO: check + NOTE: not-for-us (Cisco) CAN-2005-0599 (Cisco devices running Application and Content Networking System (ACNS) ...) - TODO: check + NOTE: not-for-us (Cisco) CAN-2005-0598 (The RealServer RealSubscriber on Cisco devices running Application and ...) - TODO: check + NOTE: not-for-us (Real) CAN-2005-0597 (Cisco devices running Application and Content Networking System (ACNS) ...) - TODO: check + NOTE: not-for-us (Cisco) CAN-2005-0596 (PHP 4 (PHP4) allows attackers to cause a denial of service (daemon ...) + NOTE: securityfocus.com down and couldn''t find enough info to check TODO: check CAN-2005-0595 (Buffer overflow in ext.dll in BadBlue 2.55 allows remote attackers ...) - TODO: check + NOTE: not-for-us (BadBlue) CAN-2005-0594 NOTE: reserved CAN-2005-0593 (Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote attackers ...) @@ -92,11 +93,11 @@ - mozilla-firefox 1.0.1 - mozilla-browser (unfixed; bug #297620) CAN-2005-0583 (Directory traversal vulnerability in Computer Associates (CA) License ...) - TODO: check + NOTE: not-for-us (Computer Associates (CA) License Client) CAN-2005-0582 (Buffer overflow in Computer Associates (CA) License Client 0.1.0.15 ...) - TODO: check + NOTE: not-for-us (Computer Associates (CA) License Client) CAN-2005-0581 (Multiple buffer overflows in Computer Associates (CA) License Client ...) - TODO: check + NOTE: not-for-us (Computer Associates (CA) License Client) CAN-2005-0580 (cmd5checkpw, when running setuid, does not properly drop privileges ...) NOTE: not-for-us (cmd5checkpw) CAN-2005-0579 (nxagent in FreeNX before 0.2.8 does not properly handle when the ...) @@ -164,7 +165,6 @@ NOTE: reserved CAN-2005-0548 NOTE: reserved -end claimed by joeyh begin claimed by djoume CAN-2004-1753 (The Apple Java plugin, as used in Netscape 7.1 and 7.2, Mozilla 1.7.2, ...) TODO: check