Author: joeyh
Date: 2005-02-25 09:14:20 +0100 (Fri, 25 Feb 2005)
New Revision: 487
Modified:
sarge-checks/CAN/list
Log:
automatic CAN database update
Modified: sarge-checks/CAN/list
==================================================================---
sarge-checks/CAN/list 2005-02-25 03:17:55 UTC (rev 486)
+++ sarge-checks/CAN/list 2005-02-25 08:14:20 UTC (rev 487)
@@ -1,3 +1,49 @@
+CAN-2005-0532 (The reiserfs_copy_from_user_to_file_region function in
reiserfs/file.c ...)
+ TODO: check
+CAN-2005-0531 (The atm_get_addr function in addr.c for Linux kernel 2.6.10 and
2.6.11 ...)
+ TODO: check
+CAN-2005-0530 (Signedness error in the copy_from_read_buf function in n_tty.c
for ...)
+ TODO: check
+CAN-2005-0529 (Linux kernel 2.6.10 and 2.6.11rc1-bk6 uses different size types
for ...)
+ TODO: check
+CAN-2005-0528
+ NOTE: reserved
+CAN-2005-0527
+ NOTE: reserved
+CAN-2005-0526 (Multiple cross-site scripting (XSS) vulnerabilities in PBLang
4.65 ...)
+ TODO: check
+CAN-2005-0525
+ NOTE: reserved
+CAN-2005-0524
+ NOTE: reserved
+CAN-2005-0523 (Format string vulnerability in ProZilla 1.3.7.3 and earlier
allows ...)
+ TODO: check
+CAN-2005-0522 (Chat Anywhere 2.72a stores sensitive information such as
passwords in ...)
+ TODO: check
+CAN-2005-0521 (SendLink 1.5 stores sensitive information, possibly including
...)
+ TODO: check
+CAN-2005-0520 (ArGoSoft before 1.4.2.8 allows remote attackers to read
arbitrary ...)
+ TODO: check
+CAN-2005-0519 (ArGoSoft before 1.4.2.7 allows remote attackers to read
arbitrary ...)
+ TODO: check
+CAN-2005-0518 (eXeem 0.21 stores sensitive information such as passwords in
plaintext ...)
+ TODO: check
+CAN-2005-0517 (PeerFTP_5 stores sensitive information such as passwords in
plaintext ...)
+ TODO: check
+CAN-2005-0516 (The ImageGalleryPlugin (ImageGalleryPlugin.pm) in Twiki allows
remote ...)
+ TODO: check
+CAN-2005-0515
+ NOTE: reserved
+CAN-2005-0514 (Cross-site scripting (XSS) vulnerability in Verity Ultraseek
before ...)
+ TODO: check
+CAN-2005-0513 (PHP remote code injection vulnerability in mail_autocheck.php in
...)
+ TODO: check
+CAN-2005-0512 (PHP remote code injection vulnerability in Tar.php in Mambo
4.5.2 ...)
+ TODO: check
+CAN-2005-0511 (Direct code injection vulnerability in misc.php for vBulletin
3.0.6 ...)
+ TODO: check
+CAN-2003-1086 (PHP remote code injection vulnerability in pm/lib.inc.php in
pMachine ...)
+ TODO: check
CAN-2005-0510 (The daemon for fallback-reboot before 0.995 allows attackers to
cause ...)
NOTE: not-for-us (fallback-reboot)
CAN-2005-0509 (Multiple cross-site scripting (XSS) vulnerabilities in the Mono
1.0.5 ...)
@@ -1486,10 +1532,10 @@
CAN-2005-0162 (Stack-based buffer overflow in the get_internal_addresses
function in ...)
- openswan 2.2.0-6
NOTE: does not seem to affect freeswan
-CAN-2005-0161
- NOTE: reserved
-CAN-2005-0160
- NOTE: reserved
+CAN-2005-0161 (Multiple directory traversal vulnerabilities in unace 1.2b allow
...)
+ TODO: check
+CAN-2005-0160 (Multiple buffer overflows in unace 1.2b allow attackers to
execute ...)
+ TODO: check
CAN-2005-0159 (The tpkg-* scripts in the toolchain-source 3.0.4 package on
Debian ...)
{DSA-679-1}
CAN-2005-0158 (Format string vulnerability in bidwatcher before 1.3.17 allows
remote ...)
@@ -3884,8 +3930,8 @@
NOTE: not-for-us (IRIX)
CAN-2004-0482 (Multiple "incorrect bounds checking" errors in
certain functions for ...)
NOTE: not-for-us (OpenBSD)
-CAN-2004-0481
- NOTE: reserved
+CAN-2004-0481 (The logging feature in kcms_configure in the KCMS package on
Solaris 8 ...)
+ TODO: check
CAN-2004-0480 (Argument injection vulnerability in IBM Lotus Notes 6.0.3 and
6.5 ...)
NOTE: not-for-us (Lotus Notes)
CAN-2004-0479 (Internet Explorer 6 allows remote attackers to cause a denial of
...)
@@ -3915,10 +3961,10 @@
NOTE: not-for-us (Juniper JUNOS)
CAN-2004-0467 (Juniper JUNOS 5.x through JUNOS 7.x allows remote attackers to
cause a ...)
NOTE: not-for-us (Juniper JUNOS)
-CAN-2004-0466
- NOTE: reserved
-CAN-2004-0465
- NOTE: reserved
+CAN-2004-0466 (WebConnect 6.5, 6.4.4, and possibly earlier versions allows
remote ...)
+ TODO: check
+CAN-2004-0465 (Directory traversal vulnerability in jretest.html in WebConnect
6.5 ...)
+ TODO: check
CAN-2004-0464
NOTE: reserved
CAN-2004-0463