Author: alec-guest Date: 2006-05-20 23:28:08 +0000 (Sat, 20 May 2006) New Revision: 4018 Modified: data/CVE/list Log: * pdnsd vulns (high) * mydns vuln (high) * quake3 vuln (itp) * more NFUs Modified: data/CVE/list ==================================================================--- data/CVE/list 2006-05-20 22:59:58 UTC (rev 4017) +++ data/CVE/list 2006-05-20 23:28:08 UTC (rev 4018) @@ -813,46 +813,46 @@ NOTE: #357204: request for removal - jsboard 2.0.10-2 CVE-2006-2108 (parser.exe in Océ (OCE) 3121/3122 Printer allows remote attackers to ...) - TODO: check + NOT-FOR-US: OCE CVE-2006-2107 (Buffer overflow in BL4 SMTP Server 0.1.4 and earlier allows remote ...) - TODO: check + NOT-FOR-US: BL4 CVE-2006-2106 (Cross-site scripting (XSS) vulnerability in Edgewall Software Trac ...) - trac 0.9.5-1 (medium) [sarge] - trac <unfixed> (medium) CVE-2006-2105 (Directory traversal vulnerability in index.php in Jupiter CMS 1.1.4 ...) - TODO: check + NOT-FOR-US: Jupiter CVE-2006-2104 (Multiple cross-site scripting (XSS) vulnerabilities in Kamgaing Email ...) - TODO: check + NOT-FOR-US: Kamgaing CVE-2006-2103 (SQL injection vulnerability in MyBB (MyBulletinBoard) 1.1.1 allows ...) - TODO: check + NOT-FOR-US: MyBB CVE-2006-2102 (Directory traversal vulnerability in PowerISO 2.9 allows remote ...) - TODO: check + NOT-FOR-US: PowerISO CVE-2006-2101 (Directory traversal vulnerability in WinISO 5.3 allows remote ...) - TODO: check + NOT-FOR-US: WinISO CVE-2006-2100 (Directory traversal vulnerability in Magic ISO 5.0 Build 0166 allows ...) - TODO: check + NOT-FOR-US: Magic ISO CVE-2006-2099 (Directory traversal vulnerability in UltraISO 8.0.0.1392 allows remote ...) - TODO: check + NOT-FOR-US: UltraISO CVE-2006-2098 (PHP remote file inclusion vulnerability in Thumbnail AutoIndex before ...) - TODO: check + NOT-FOR-US: Thumbnail AutoIndex CVE-2006-2097 (SQL injection vulnerability in func_msg.php in Invision Power Board ...) - TODO: check + NOT-FOR-US: Invision CVE-2006-2096 (plug.php in Land Down Under (LDU) 802 and earlier allows remote ...) - TODO: check + NOT-FOR-US: LDU CVE-2006-2095 (Phex before 2.8.6 allows remote attackers to cause a denial of service ...) - TODO: check + NOT-FOR-US: Phex CVE-2006-2094 (Microsoft Internet Explorer before Windows XP Service Pack 2 and ...) NOT-FOR-US: Microsoft Internet Explorer CVE-2006-2093 (Nessus before 2.2.8, and 3.x before 3.0.3, allows user-complicit ...) - libnasl <unfixed> (bug #365898; low) CVE-2006-2092 (Unspecified vulnerability in HP StorageWorks Secure Path for Windows ...) - TODO: check + NOT-FOR-US: HP CVE-2006-2091 (admin.php in Virtual War (VWar) 1.5 and versions before 1.2 allows ...) NOT-FOR-US: Virtual War CVE-2006-2090 (Multiple SQL injection vulnerabilities in misc.php in MySmartBB 1.1.x ...) - TODO: check + NOT-FOR-US: MySmartBB CVE-2006-2089 (Multiple cross-site scripting (XSS) vulnerabilities in misc.php in ...) - TODO: check + NOT-FOR-US: OpenBB CVE-2006-2088 (Multiple cross-site scripting (XSS) vulnerabilities in Devsyn Open ...) TODO: check CVE-2006-2087 (The Gmax Mail client in Hitachi Groupmax before 20060426 allows remote ...) @@ -862,27 +862,27 @@ CVE-2006-2085 (Multiple buffer overflows in (1) CxAce60.dll and (2) CxAce60u.dll in ...) NOT-FOR-US: SpeedProject Squeez CVE-2006-2084 (Multiple cross-site scripting (XSS) vulnerabilities in FarsiNews 2.5.3 ...) - TODO: check + NOT-FOR-US: FarsiNews CVE-2006-2083 (Integer overflow in the receive_xattr function in the extended ...) - rsync 2.6.8-1 (bug #365614; high) [sarge] - rsync <not-affected> (xattr patch appeared in 2.6.7) [woody] - rsync <not-affected> (xattr patch appeared in 2.6.7) CVE-2006-2082 (Directory traversal vulnerability in Quake 3 engine, as used in ...) - TODO: check + - quake3 <itp> (bug #337937) CVE-2006-2081 (Oracle Database Server 10g Release 2 allows local users to execute ...) NOT-FOR-US: Oracle CVE-2006-2080 (SQL injection vulnerability in portfolio_photo_popup.php in Verosky ...) - TODO: check + NOT-FOR-US: Verosky CVE-2006-2079 (Cross-site scripting (XSS) vulnerability in portfolio.php in Verosky ...) - TODO: check + NOT-FOR-US: Verosky CVE-2006-2078 (Multiple unspecified vulnerabilities in multiple FITELnet products, ...) - TODO: check + NOT-FOR-US: FITELnet CVE-2006-2077 (Buffer overflow in Paul Rombouts pdnsd before 1.2.4 has unknown impact ...) - TODO: check + - pdnsd <unfixed> (high) CVE-2006-2076 (Memory leak in Paul Rombouts pdnsd before 1.2.4 allows remote ...) - TODO: check + - pdnsd <unfixed> (high) CVE-2006-2075 (Unspecified vulnerability in MyDNS 1.1.0 allows remote attackers to ...) - TODO: check + - mydns <unfixed> (high) CVE-2006-2074 (Unspecified vulnerability in Juniper Networks JUNOSe E-series routers ...) NOT-FOR-US: Juniper Networks JUNOSe CVE-2006-2073 (Unspecified vulnerability in ISC BIND allows remote attackers to cause ...)