Author: stef-guest Date: 2007-01-08 21:22:06 +0100 (Mon, 08 Jan 2007) New Revision: 5225 Modified: data/CVE/list Log: - new avahi issue already fixed - new fetchmail issue already fixed Modified: data/CVE/list ==================================================================--- data/CVE/list 2007-01-08 20:02:11 UTC (rev 5224) +++ data/CVE/list 2007-01-08 20:22:06 UTC (rev 5225) @@ -1,3 +1,5 @@ +CVE-2006-6870 [avahi DoS] + - avahi 0.6.16-1 CVE-2007-XXXX [CenterICQ buffer overflow] - centericq 4.21.0-17 NOTE: http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/051663.html @@ -2105,8 +2107,9 @@ NOT-FOR-US: BlogMe CVE-2006-5975 (Multiple cross-site scripting (XSS) vulnerabilities in comments.asp in ...) NOT-FOR-US: BlogMe -CVE-2006-5974 +CVE-2006-5974 [fetchmail DoS] RESERVED + - fetchmail 6.3.6~rc3-1 CVE-2006-5973 (Off-by-one buffer overflow in Dovecot 1.0test53 through 1.0.rc14, and ...) - dovecot 1.0.rc15-1 [sarge] - dovecot <not-affected> (Vulnerable code not present) @@ -2339,8 +2342,9 @@ CVE-2006-5868 (Multiple buffer overflows in Imagemagick 6.0 before 6.0.6.2, and 6.2 ...) {DSA-1213} - imagemagick 7:6.2.4.5.dfsg1-0.11 -CVE-2006-5867 +CVE-2006-5867 [fetchmail cannot enforce TLS] RESERVED + - fetchmail 6.3.6~rc5-1 CVE-2006-5866 (Directory traversal vulnerability in Mdoc/view-sourcecode.php for ...) NOT-FOR-US: phpManta CVE-2006-5865 (PHP remote file inclusion vulnerability in language.inc.php for Script ...)