Author: joeyh Date: 2006-02-15 09:14:32 +0000 (Wed, 15 Feb 2006) New Revision: 3487 Modified: data/CVE/list Log: automatic update Modified: data/CVE/list ==================================================================--- data/CVE/list 2006-02-15 08:33:27 UTC (rev 3486) +++ data/CVE/list 2006-02-15 09:14:32 UTC (rev 3487) @@ -59,7 +59,7 @@ CVE-2006-0649 (Cross-site scripting (XSS) vulnerability in DataparkSearch before 4.37 ...) NOT-FOR-US: DataparkSearch CVE-2006-0648 (Multiple directory traversal vulnerabilities in PHP iCalendar 2.0.1, ...) - NOT-FOR-US: PHP iCalendar + NOT-FOR-US: PHP iCalendar CVE-2006-0647 (LDAP service in Sun Java System Directory Server 5.2, running on Linux ...) NOT-FOR-US: Sun Java System Directory Server CVE-2006-0646 (ld in SUSE Linux 9.1 through 10.0, and SLES 9, in certain ...) @@ -377,9 +377,9 @@ CVE-2006-0514 RESERVED CVE-2006-0513 (Directory traversal vulnerability in pkmslogout in Tivoli Web Server ...) - NOT-FOR-US: Tivoli + NOT-FOR-US: Tivoli CVE-2006-0512 (PADL MigrationTools 46 creates temporary files insecurely, which ...) - NOT-FOR-US: PADL MigrationTools + NOT-FOR-US: PADL MigrationTools CVE-2006-0511 (** DISPUTED ** Blackboard Academic Suite 6.0 and earlier does not ...) NOT-FOR-US: Blackboard Academic Suite CVE-2006-0510 (SQL injection vulnerability in userlogin.jsp in Daffodil CRM 1.5 ...) @@ -925,7 +925,7 @@ CVE-2006-0302 (ZyXel P2000W VoIP 802.11b Wireless Phone running firmware WV.00.02 ...) NOT-FOR-US: ZyXel hardware CVE-2006-0301 (Heap-based buffer overflow in Splash.cc in xpdf, as used in other ...) - {DSA-971-1} + {DSA-972-1 DSA-971-1} - poppler 0.4.5-1 (medium) - tetex-bin 3.0-12 (medium) - kdegraphics 4:3.5.1-2 (medium) @@ -3327,10 +3327,13 @@ - mozilla-firefox <unfixed> (bug #340283; bug #345469; low) - mozilla <unfixed> (bug #340282; low) CVE-2005-3895 (Open Ticket Request System (OTRS) 1.0.0 through 1.3.2 and 2.0.0 ...) + {DSA-973-1} - otrs 2.0.4p01-1 (bug #340352; medium) CVE-2005-3894 (Multiple cross-site scripting (XSS) vulnerabilities in index.pl in ...) + {DSA-973-1} - otrs 2.0.4p01-1 (bug #340352; medium) CVE-2005-3893 (Multiple SQL injection vulnerabilities in index.pl in Open Ticket ...) + {DSA-973-1} - otrs 2.0.4p01-1 (bug #340352; medium) CVE-2005-3892 (Gadu-Gadu 7.20 allows remote attackers to eavesdrop on a user via a ...) NOT-FOR-US: Gadu-Gadu