Author: jmm-guest Date: 2006-01-11 10:14:18 +0000 (Wed, 11 Jan 2006) New Revision: 3266 Modified: data/CVE/list Log: xmame buffer overflows Modified: data/CVE/list ==================================================================--- data/CVE/list 2006-01-11 09:56:20 UTC (rev 3265) +++ data/CVE/list 2006-01-11 10:14:18 UTC (rev 3266) @@ -1,3 +1,9 @@ +CVE-2006-XXXX [xmame buffer overflows] + - xmame <unfixed> + NOTE: Only xmame-svgalib is vulnerable, the xmame-x package has a debconf + NOTE: question, that makes it very clear that setuid root is only for single-user + NOTE: systems and xmame-sdl and xmess aren''t setuid at all + [sarge] - xmame <no-dsa> (XMame is non-free software) CVE-2006-0160 (SQL injection vulnerability in add_post.php3 in Venom Board 1.22 ...) TODO: check CVE-2006-0159 (SQL injection vulnerability in escribir.php in Foro Domus 2.10 allows ...)