Author: jmm-guest
Date: 2005-12-28 00:47:15 +0000 (Wed, 28 Dec 2005)
New Revision: 3171
Modified:
data/CVE/list
Log:
two new issues in scponly and rssh
bugnums
Modified: data/CVE/list
==================================================================---
data/CVE/list 2005-12-28 00:32:39 UTC (rev 3170)
+++ data/CVE/list 2005-12-28 00:47:15 UTC (rev 3171)
@@ -1,3 +1,7 @@
+CVE-2005-XXXX [privilege escalation in scponly]
+ - scponly <unfixed> (bug #344418)
+CVE-2005-XXXX [privilege escalation in rssh]
+ - rssh <unfixed> (bug #344395; bug #344424)
CVE-2005-XXXX [Insecure tempfile in Bugzilla''s syncshadowdb]
- bugzilla 2.18 (bug #329387; low)
NOTE: The vulnerable script has been removed in the 2.18 upstream release
@@ -264,7 +268,9 @@
CVE-2005-4358 (admin/admin_disallow.php in phpBB 2.0.18 allows remote attackers
to ...)
- phpbb2 <unfixed> (unimportant)
CVE-2005-4357 (Cross-site scripting (XSS) vulnerability in phpBB 2.0.18, when
...)
- - phpbb2 <unfixed> (bug #344674)
+ - phpbb2 <unfixed> (bug #344674; low)
+ NOTE: According to the maintainer only affects a config option that is
strongly
+ NOTE: discouraged due to potential security problems
CVE-2005-4356 (SQL injection vulnerability in UStore allows remote attackers to
...)
NOT-FOR-US: UStore
CVE-2005-4355 (Multiple cross-site scripting (XSS) vulnerabilities in UStore
allow ...)
@@ -2213,7 +2219,7 @@
CVE-2005-3574 (PHP file inclusion vulnerability in index.php of iCMS allows
remote ...)
NOT-FOR-US: iCMS
CVE-2005-3573 (Scrubber.py in Mailman 2.1.5-8 does not properly handle UTF8
character ...)
- - mailman 2.1.5-10 (bug #327732; medium)
+ - mailman 2.1.5-10 (bug #327732; bug #339095; medium)
CVE-2005-3572 (SQL injection vulnerability in index.php in Peel 2.6 through 2.7
...)
NOT-FOR-US: Peel
CVE-2005-3571 (PHP file inclusion vulnerability in protection.php in CodeGrrl
(a) ...)
@@ -17275,7 +17281,7 @@
TODO: Check 2.6
CVE-2004-0564 (Roaring Penguin pppoe (rp-ppoe), if installed or configured to
run ...)
{DSA-557-1}
- - rp-pppoe 3.5-4
+ - rp-pppoe 3.5-4 (bug #343264)
CVE-2004-0563 (The tspc.conf configuration file in freenet6 before 0.9.6 and
before ...)
{DSA-555-1}
- freenet6 1.0-2.2