Author: jmm-guest
Date: 2006-04-03 12:31:12 +0000 (Mon, 03 Apr 2006)
New Revision: 3735
Modified:
data/CVE/list
Log:
new tcpick issue
bugnums
Modified: data/CVE/list
==================================================================---
data/CVE/list 2006-04-03 09:59:18 UTC (rev 3734)
+++ data/CVE/list 2006-04-03 12:31:12 UTC (rev 3735)
@@ -1,9 +1,9 @@
CVE-2006-1548 [struts xss]
- - libstruts1.2-java <unfixed> (bug filed)
+ - libstruts1.2-java <unfixed> (bug #360551)
CVE-2006-1547 [struts dos]
- - libstruts1.2-java <unfixed> (bug filed)
+ - libstruts1.2-java <unfixed> (bug #360551)
CVE-2006-1546 [struts validation bypass]
- - libstruts1.2-java <unfixed> (bug filed)
+ - libstruts1.2-java <unfixed> (bug #360551)
CVE-2006-1545 (Direct static code injection vulnerability in admin/config.php
in ...)
TODO: check
CVE-2006-1544 (Multiple cross-site scripting (XSS) vulnerabilities in news.php
in ...)
@@ -139,7 +139,7 @@
- hamlib <unfixed> (bug #358166; low)
[sarge] - hamlib <no-dsa> (Only exploitable with strange user name)
CVE-2006-1550 [dia buffer overflow in xfig import]
- - dia 0.94.0-18
+ - dia 0.94.0-18 (bug #360566)
CVE-2006-1498 (Cross-site scripting (XSS) vulnerability in MediaWiki before
1.5.8 and ...)
- mediawiki 1.4.15-1
- mediawiki1.5 1.5.8-1
@@ -3642,8 +3642,9 @@
CVE-2006-0049 (gpg in GnuPG before 1.4.2.2 does not properly verify
non-detached ...)
{DSA-993-2}
- gnupg 1.4.2.2-1 (bug #356125; medium)
-CVE-2006-0048
+CVE-2006-0048 [tcpick dos]
RESERVED
+ - tcpick <unfixed> (bug #360571; medium)
CVE-2006-0047 (packets.c in Freeciv 2.0 before 2.0.8 allows remote attackers to
cause ...)
{DSA-994-1}
- freeciv 2.0.8-1 (medium; bug #355211)