Author: djoume-guest
Date: 2005-01-13 18:40:52 +0100 (Thu, 13 Jan 2005)
New Revision: 272
Modified:
sarge-checks/CAN/list
Log:
* processed my block
Modified: sarge-checks/CAN/list
==================================================================---
sarge-checks/CAN/list 2005-01-13 08:48:13 UTC (rev 271)
+++ sarge-checks/CAN/list 2005-01-13 17:40:52 UTC (rev 272)
@@ -6003,6 +6003,7 @@
- apache 1.3.27-0.1
CAN-2002-0838 (Buffer overflow in (1) gv 3.5.8 and earlier, (2) gvv 1.0.2 and
...)
{DSA-182 DSA-179 DSA-176}
+begin claimed by djoume
CAN-2002-0837 (wordtrans 1.1pre8 and earlier in the wordtrans-web package
allows ...)
TODO: check
CAN-2002-0836
@@ -6121,78 +6122,77 @@
TODO: check
CAN-2002-0735 (Format string vulnerability in the logging() function in C-Note
Squid ...)
TODO: check
+end claimed by djoume
CAN-2002-0732 (Cross-site scripting vulnerability in MyGuestbook 1.0 allows
remote ...)
NOTE: not-for-us (MyGuestbook)
CAN-2002-0731 (Cross-site scripting vulnerability in demonstration scripts for
...)
NOTE: not-for-us (vqServer)
CAN-2002-0730 (Cross-site scripting vulnerability in guestbook.pl for Philip
...)
NOTE: not-for-us (guestbook)
-begin claimed by djoume
CAN-2002-0728 (Buffer overflow in the progressive reader for libpng 1.2.x
before ...)
{DSA-140}
CAN-2002-0725 (NTFS file system in Windows NT 4.0 and Windows 2000 SP2 allows
local ...)
- TODO: check
+ NOTE: not-for-us (windows)
CAN-2002-0724 (Buffer overflow in SMB (Server Message Block) protocol in
Microsoft ...)
- TODO: check
+ TODO: not-for-us (windows)
CAN-2002-0723 (Microsoft Internet Explorer 5.5 and 6.0 does not properly verify
the ...)
- TODO: check
+ TODO: not-for-us (internet explorer)
CAN-2002-0721 (Microsoft SQL Server 7.0 and 2000 installs with weak permissions
for ...)
- TODO: check
+ TODO: not-for-us (Microsoft SQL Server)
CAN-2002-0717 (PHP 4.2.0 and 4.2.1 allows remote attackers to cause a denial of
...)
- TODO: check
+ - php4 4:4.2.2-1
CAN-2002-0715 (Vulnerability in Squid before 2.4.STABLE6 related to proxy ...)
- TODO: check
+ - squid 2.4.6-2
CAN-2002-0713 (Buffer overflows in Squid before 2.4.STABLE6 allow remote
attackers to ...)
- TODO: check
+ - squid 2.4.6-2
CAN-2002-0712 (Entrust Authority Security Manager (EASM) 6.0 does not properly
...)
- TODO: check
+ NOTE: not-for-us (EASM not in Debian)
CAN-2002-0711 (Unknown vulnerability in Cluster Interconnect for HP TruCluster
Server ...)
- TODO: check
+ NOTE: not-for-us (HP)
CAN-2002-0709 (SQL injection vulnerabilities in the Web Reports Server for ...)
- TODO: check
+ NOTE: not-for-us
CAN-2002-0708 (Directory traversal vulnerability in the Web Reports Server for
...)
- TODO: check
+ NOTE: not-for-us
CAN-2002-0707 (The Web Reports Server for SurfControl SuperScout WebFilter
allows ...)
- TODO: check
+ NOTE: not-for-us
CAN-2002-0706 (UserManager.js in the Web Reports Server for SurfControl
SuperScout ...)
- TODO: check
+ NOTE: not-for-us
CAN-2002-0705 (The Web Reports Server for SurfControl SuperScout WebFilter
stores the ...)
- TODO: check
+ NOTE: not-for-us
CAN-2002-0702 (Format string vulnerabilities in the logging routines for
dynamic DNS ...)
- TODO: check
+ - dhcp3 3.0+3.0.1rc9-1
CAN-2002-0699 (Unknown vulnerability in the Certificate Enrollment ActiveX
Control in ...)
- TODO: check
+ NOTE: not-for-us (windows)
CAN-2002-0693 (Buffer overflow in the HTML Help ActiveX Control (hhctrl.ocx) in
...)
- TODO: check
+ NOTE: not-for-us (windows)
CAN-2002-0690 (Format string vulnerability in McAfee Security ePolicy
Orchestrator ...)
- TODO: check
+ NOTE: not-for-us (McAfee)
CAN-2002-0689
NOTE: reserved
CAN-2002-0686 (Buffer overflow in the search component for iPlanet Web Server
(iWS) ...)
- TODO: check
+ NOTE: not-for-us
CAN-2002-0684 (Buffer overflow in DNS resolver functions that perform lookup of
...)
- TODO: check
+ - glibc 2.2.5-8
CAN-2002-0683 (Directory traversal vulnerability in Carello 1.3 allows remote
...)
- TODO: check
+ NOTE: not-for-us
CAN-2002-0681 (Cross-site scripting vulnerability in GoAhead Web Server 2.1
allows ...)
- TODO: check
+ NOTE: not-for-us
CAN-2002-0680 (Directory traversal vulnerability in GoAhead Web Server 2.1
allows ...)
- TODO: check
+ NOTE: not-for-us
CAN-2002-0677 (CDE ToolTalk database server (ttdbserver) allows remote
attackers to ...)
- TODO: check
+ NOTE: not-for-us
CAN-2002-0675 (Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through
1.2.7.4 ...)
- TODO: check
+ NOTE: not-for-us
CAN-2002-0670 (The web interface for Pingtel xpressa SIP-based voice-over-IP
phone ...)
- TODO: check
+ NOTE: not-for-us
CAN-2002-0669 (The web interface for Pingtel xpressa SIP-based voice-over-IP
phone ...)
- TODO: check
+ NOTE: not-for-us
CAN-2002-0667 (Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through
1.2.7.4 ...)
- TODO: check
+ NOTE: not-for-us
CAN-2002-0666 (IPSEC implementations including (1) FreeS/WAN and (2) KAME do
not ...)
{DSA-201}
CAN-2002-0664 (The default Access Control Lists (ACLs) of the administration
database ...)
- TODO: check
-end claimed by djoume
+ NOTE: not-for-us (ZMerge not in Debian)
CAN-2002-0662
{DSA-160}
CAN-2002-0661 (Directory traversal vulnerability in Apache 2.0 through 2.0.39
on ...)