Author: joeyh Date: 2006-05-15 21:14:23 +0000 (Mon, 15 May 2006) New Revision: 3957 Modified: data/CVE/list Log: automatic update Modified: data/CVE/list ==================================================================--- data/CVE/list 2006-05-15 18:35:07 UTC (rev 3956) +++ data/CVE/list 2006-05-15 21:14:23 UTC (rev 3957) @@ -226,6 +226,7 @@ CVE-2006-2248 (Xeneo Web Server 2.2.22.0 allows remote attackers to obtain the source ...) NOT-FOR-US: Xeneo Web Server CVE-2006-2247 (WebCalendar 1.0.1 to 1.0.3 generates different error messages ...) + {DSA-1056-1} - webcalendar <unfixed> (medium; bug #366927) CVE-2006-2246 (Cross-site scripting (XSS) vulnerability in UBlog 1.6 Access Edition ...) NOT-FOR-US: UBlog @@ -1439,7 +1440,7 @@ - thunderbird 1.5.0.2-1 (medium) [sarge] - mozilla-thunderbird 1.0.2-2.sarge1.0.8 (medium) CVE-2006-1732 (Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x ...) - {DSA-1051-1 DSA-1044-1} + {DSA-1051-1 DSA-1046-1 DSA-1044-1} - firefox <unfixed> (medium) - mozilla-firefox <unfixed> (medium) - mozilla <unfixed> (medium) @@ -9665,6 +9666,7 @@ - xscreensaver 4.23-2 (bug #334193; low) [sarge] - xscreensaver <no-dsa> (Unproblematic for users running stable) CVE-2005-3185 (Stack-based buffer overflow in the ntlm_output function in http-ntlm.c ...) + {DSA-919-2} - wget 1.10.2-1 (medium) [sarge] - wget <not-affected> (Does not contain NTML authentication code) [woody] - wget <not-affected> (Does not contain NTML authentication code)