Author: joeyh Date: 2007-01-09 21:14:21 +0100 (Tue, 09 Jan 2007) New Revision: 5228 Modified: data/CVE/list Log: automatic update Modified: data/CVE/list ==================================================================--- data/CVE/list 2007-01-09 18:20:44 UTC (rev 5227) +++ data/CVE/list 2007-01-09 20:14:21 UTC (rev 5228) @@ -1,6 +1,294 @@ +CVE-2007-0139 (Unspecified vulnerability in the DECnet-Plus 7.3-2 feature in ...) + TODO: check +CVE-2007-0138 (formbankcgi.exe in Fersch Formbankserver 1.9, when the PATH_INFO ...) + TODO: check +CVE-2007-0137 (Cross-site scripting (XSS) vulnerability in SimpleBoxes/SerendipityNZ ...) + TODO: check +CVE-2007-0136 (Multiple cross-site scripting (XSS) vulnerabilities in Drupal before ...) + TODO: check +CVE-2007-0135 (PHP remote file inclusion vulnerability in inc/init.inc.php in Aratix ...) + TODO: check +CVE-2007-0134 (Multiple eval injection vulnerabilities in iGeneric iG Shop 1.0 allow ...) + TODO: check +CVE-2007-0133 (Multiple SQL injection vulnerabilities in display_review.php in ...) + TODO: check +CVE-2007-0132 (SQL injection vulnerability in compare_product.php in iGeneric iG Shop ...) + TODO: check +CVE-2007-0131 (JAMWiki before 0.5.0 does not properly check permissions during moves ...) + TODO: check +CVE-2007-0130 (SQL injection vulnerability in user.php in iGeneric iG Calendar 1.0 ...) + TODO: check +CVE-2007-0129 (SQL injection vulnerability in main.asp in LocazoList 2.01a beta5 and ...) + TODO: check +CVE-2007-0128 (SQL injection vulnerability in info_book.asp in Digirez 3.4 and ...) + TODO: check +CVE-2007-0127 (The Javascript SVG support in Opera before 9.10 does not properly ...) + TODO: check +CVE-2007-0126 (Heap-based buffer overflow in Opera 9.02 allows remote attackers to ...) + TODO: check +CVE-2007-0125 (Kaspersky Labs Antivirus Engine 6.0 for Windows and 5.5-10 for Linux ...) + TODO: check +CVE-2007-0124 (Unspecified vulnerability in Drupal before 4.6.11, and 4.7 before ...) + TODO: check +CVE-2007-0123 (Unrestricted file upload vulnerability in Uber Uploader 4.2 allows ...) + TODO: check +CVE-2007-0122 (Multiple SQL injection vulnerabilities in Coppermine Photo Gallery ...) + TODO: check +CVE-2007-0121 (Cross-site scripting (XSS) vulnerability in search.asp in RI Blog 1.3 ...) + TODO: check +CVE-2007-0120 (Acunetix Web Vulnerability Scanner (WVS) 4.0 Build 20060717 and ...) + TODO: check +CVE-2007-0119 (Multiple cross-site scripting (XSS) vulnerabilities in EditTag 1.2 ...) + TODO: check +CVE-2007-0118 (Multiple absolute path traversal vulnerabilities in EditTag 1.2 allow ...) + TODO: check +CVE-2007-0117 (DiskManagementTool in the DiskManagement.framework 92.29 on Mac OS X ...) + TODO: check +CVE-2007-0116 (Digger Solutions Intranet Open Source (IOS) stores sensitive ...) + TODO: check +CVE-2007-0115 (Static code injection vulnerability in Coppermine Photo Gallery 1.4.10 ...) + TODO: check +CVE-2007-0114 (Sun Java System Content Delivery Server 5.0 and 5.0 PU1 allows remote ...) + TODO: check +CVE-2007-0113 (Buffer overflow in Packeteer PacketShaper PacketWise 8.x allows remote ...) + TODO: check +CVE-2007-0112 (SQL injection vulnerability in cats.asp in createauction allows remote ...) + TODO: check +CVE-2007-0111 (Buffer overflow in Resco Photo Viewer for PocketPC 4.11 and 6.01, as ...) + TODO: check +CVE-2007-0110 (Cross-site scripting (XSS) vulnerability in nidp/idff/sso in Novell ...) + TODO: check +CVE-2007-0109 (wp-login.php in WordPress 2.0.5 and earlier displays different error ...) + TODO: check +CVE-2007-0108 (nwgina.dll in Novell Client 4.91 SP3 for Windows 2000/XP/2003 does not ...) + TODO: check +CVE-2007-0107 (WordPress before 2.0.6, when mbstring is enabled for PHP, decodes ...) + TODO: check +CVE-2007-0106 (Cross-site scripting (XSS) vulnerability in the CSRF protection scheme ...) + TODO: check +CVE-2007-0105 (Stack-based buffer overflow in the CSAdmin service in Cisco Secure ...) + TODO: check +CVE-2007-0104 (The Adobe PDF specification 1.3, as implemented by xpdf 3.0.1 patch 2, ...) + TODO: check +CVE-2007-0103 (The Adobe PDF specification 1.3, as implemented by Adobe Acrobat ...) + TODO: check +CVE-2007-0102 (The Adobe PDF specification 1.3, as implemented by Apple Mac OS X ...) + TODO: check +CVE-2007-0101 (Cross-site request forgery (CSRF) vulnerability in SPINE allows remote ...) + TODO: check +CVE-2007-0100 (The Perforce client does not restrict the set of files that it ...) + TODO: check +CVE-2007-0099 (Race condition in the msxml3 module in Microsoft Internet Explorer 6 ...) + TODO: check +CVE-2007-0098 (Directory traversal vulnerability in language.php in VerliAdmin 0.3 ...) + TODO: check +CVE-2007-0097 (Multiple stack-based buffer overflows in the (1) LoadTree and (2) ...) + TODO: check +CVE-2007-0096 (CarbonCommunities stores sensitive information under the web root with ...) + TODO: check +CVE-2007-0095 (phpMyAdmin 2.9.1.1 allows remote attackers to obtain sensitive ...) + TODO: check +CVE-2007-0094 (Sven Moderow GuestBook 0.3a stores sensitive information under the web ...) + TODO: check +CVE-2007-0093 (SQL injection vulnerability in page.php in Simple Web Content ...) + TODO: check +CVE-2007-0092 (SQL injection vulnerability in productdetail.asp in E-SMARTCART 1.0 ...) + TODO: check +CVE-2007-0091 (newsCMSlite stores sensitive information under the web root with ...) + TODO: check +CVE-2007-0090 (WineGlass stores sensitive information under the web root with ...) + TODO: check +CVE-2007-0089 (jgbbs stores sensitive information under the web root with ...) + TODO: check +CVE-2007-0088 (Multiple directory traversal vulnerabilities in openmedia allow remote ...) + TODO: check +CVE-2007-0087 (** DISPUTED ** ...) + TODO: check +CVE-2007-0086 (** DISPUTED ** ...) + TODO: check +CVE-2007-0085 (Unspecified vulnerability in sys/dev/pci/vga_pci.c in the VGA graphics ...) + TODO: check +CVE-2007-0084 (** DISPUTED ** ...) + TODO: check +CVE-2007-0083 (Cross-site scripting (XSS) vulnerability in Nuked Klan 1.7 and earlier ...) + TODO: check +CVE-2007-0082 (users_adm/start1.php in IMGallery 2.5 and earlier does not properly ...) + TODO: check +CVE-2007-0081 (Sunbelt Kerio Personal Firewall (SKPF) 4.3.268 and 4.3.246, and ...) + TODO: check +CVE-2007-0080 (Buffer overflow in the SMB_Connect_Server function in FreeRadius 1.1.3 ...) + TODO: check +CVE-2007-0079 (rblog stores sensitive information under the web root with ...) + TODO: check +CVE-2007-0078 (BattleBlog stores sensitive information under the web root with ...) + TODO: check +CVE-2007-0077 (lblog stores sensitive information under the web root with ...) + TODO: check +CVE-2007-0076 (Openforum stores sensitive information under the web root with ...) + TODO: check +CVE-2007-0075 (AspBB stores sensitive information under the web root with ...) + TODO: check +CVE-2007-0074 + RESERVED +CVE-2007-0073 + RESERVED +CVE-2007-0072 + RESERVED +CVE-2007-0071 + RESERVED +CVE-2007-0070 + RESERVED +CVE-2007-0069 + RESERVED +CVE-2007-0068 + RESERVED +CVE-2007-0067 + RESERVED +CVE-2007-0066 + RESERVED +CVE-2007-0065 + RESERVED +CVE-2007-0064 + RESERVED +CVE-2007-0063 + RESERVED +CVE-2007-0062 + RESERVED +CVE-2007-0061 + RESERVED +CVE-2007-0060 + RESERVED +CVE-2007-0059 (Cross-zone scripting vulnerability in Apple Quicktime 3 to 7.1.3 ...) + TODO: check +CVE-2007-0058 (Cisco Clean Access (CCA) 3.5.x through 3.5.9 and 3.6.x through 3.6.1.1 ...) + TODO: check +CVE-2007-0057 (Cisco Clean Access (CCA) 3.6.x through 3.6.4.2 and 4.0.x through ...) + TODO: check +CVE-2007-0056 (Multiple cross-site scripting (XSS) vulnerabilities in AShop Deluxe ...) + TODO: check +CVE-2007-0055 (Directory traversal vulnerability in formbankcgi.exe/AbfrageForm in ...) + TODO: check +CVE-2007-0054 (Cross-site scripting (XSS) vulnerability in gbrowse.php in Belchior ...) + TODO: check +CVE-2007-0053 (SQL injection vulnerability in detail.asp in ASP SiteWare autoDealer ...) + TODO: check +CVE-2007-0052 (SQL injection vulnerability in haberdetay.asp in Vizayn Haber allows ...) + TODO: check +CVE-2007-0051 (Format string vulnerability in Apple iPhoto 6.0.5 (316), and possibly ...) + TODO: check +CVE-2006-6910 (formbankcgi.exe in Fersch Formbankserver 1.9, when the PATH_INFO ...) + TODO: check +CVE-2006-6909 (Stack-based buffer overflow in http.c in Karl Dahlke Edbrowse (aka ...) + TODO: check +CVE-2006-6908 (Buffer overflow in the Bluetooth Stack COM Server in the Widcomm ...) + TODO: check +CVE-2006-6907 (Unspecified vulnerability in the Bluesoil Bluetooth stack has unknown ...) + TODO: check +CVE-2006-6906 (Unspecified vulnerability in the Bluetooth stack on Mac OS 10.4.7 and ...) + TODO: check +CVE-2006-6905 (Unspecified vulnerability in the Widcomm Bluetooth stack allows remote ...) + TODO: check +CVE-2006-6904 (Unspecified vulnerability in the Broadcom Bluetooth stack allows ...) + TODO: check +CVE-2006-6903 (Unspecified vulnerability in the Toshiba Bluetooth stack allows remote ...) + TODO: check +CVE-2006-6902 (Unspecified vulnerability in the Bluetooth stack in Microsoft Windows ...) + TODO: check +CVE-2006-6901 (Unspecified vulnerability in the Bluetooth stack in Microsoft Windows ...) + TODO: check +CVE-2006-6900 (Unspecified vulnerability in the Bluetooth stack in Apple Mac OS 10.4 ...) + TODO: check +CVE-2006-6899 (hidd in BlueZ (bluez-utils) before 2.25 allows remote attackers to ...) + TODO: check +CVE-2006-6898 (Widcomm Bluetooth for Windows (BTW) before 4.0.1.1500 allows remote ...) + TODO: check +CVE-2006-6897 (Directory traversal vulnerability in Widcomm Bluetooth for Windows ...) + TODO: check +CVE-2006-6896 (The Bluetooth stack in the Plantronic Headset does not properly ...) + TODO: check +CVE-2006-6895 (The Bluetooth stack in the Sony Ericsson T60 does not properly ...) + TODO: check +CVE-2006-6894 (Multiple unspecified vulnerabilities in SPINE before 1.2 have unknown ...) + TODO: check +CVE-2006-6893 (Tor allows remote attackers to discover the IP address of a hidden ...) + TODO: check +CVE-2006-6892 (Cross-site scripting (XSS) vulnerability in the GetLocation function ...) + TODO: check +CVE-2006-6891 (Vz (Adp) Forum 2.0.3 stores sensitive information under the web root ...) + TODO: check +CVE-2006-6890 (Voodoo chat 1.0RC1b stores sensitive information under the web root ...) + TODO: check +CVE-2006-6889 (FreeStyle Wiki (fswiki) 3.6.2 and earlier stores sensitive information ...) + TODO: check +CVE-2006-6888 (P-News 1.16 and 1.17 store sensitive information under the web root ...) + TODO: check +CVE-2006-6887 (Unrestricted file upload vulnerability in logahead UNU 1.0 allows ...) + TODO: check +CVE-2006-6886 (phpwcms 1.2.5-DEV allows remote attackers to obtain sensitive ...) + TODO: check +CVE-2006-6885 (An ActiveX control in SwDir.dll in Macromedia Shockwave 10 allows ...) + TODO: check +CVE-2006-6884 (Buffer overflow in the WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka ...) + TODO: check +CVE-2006-6883 (** DISPUTED ** PHP remote file inclusion vulnerability in php4you.php ...) + TODO: check +CVE-2006-6882 (Cross-site scripting (XSS) vulnerability in golden book allows remote ...) + TODO: check +CVE-2006-6881 (Buffer overflow in the Get_Wep function in cofvnet.c for ATMEL Linux ...) + TODO: check +CVE-2006-6880 (Multiple SQL injection vulnerabilities in code/guestadd.php in ...) + TODO: check +CVE-2006-6879 (Unrestricted file upload vulnerability in admin/uploads.php in ...) + TODO: check +CVE-2006-6878 (admin/uploads.php in PHP-Update 2.7 and earlier allows remote ...) + TODO: check +CVE-2006-6877 (Directory traversal vulnerability in index.php in Matteo Lucarelli ...) + TODO: check +CVE-2006-6876 (The fetchsms function in the SMS handling module (libsms_getsms.c) in ...) + TODO: check +CVE-2006-6875 (Buffer overflow in the validateospheader function in the Open ...) + TODO: check +CVE-2006-6874 (Multiple cross-site scripting (XSS) vulnerabilities in friend.php in ...) + TODO: check +CVE-2006-6873 (Multiple SQL injection vulnerabilities in mod.php in eNdonesia 8.4 ...) + TODO: check +CVE-2006-6872 (Directory traversal vulnerability in mod.php in eNdonesia 8.4 allows ...) + TODO: check +CVE-2006-6871 (Multiple cross-site scripting (XSS) vulnerabilities in eNdonesia 8.4 ...) + TODO: check +CVE-2006-6869 (Directory traversal vulnerability in ...) + TODO: check +CVE-2006-6868 (Multiple cross-site scripting (XSS) vulnerabilities in Zen Cart Web ...) + TODO: check +CVE-2006-6867 (Multiple PHP remote file inclusion vulnerabilities in Vladimir ...) + TODO: check +CVE-2006-6866 (STphp EasyNews PRO 4.0 stores sensitive information under the web root ...) + TODO: check +CVE-2006-6865 (Directory traversal vulnerability in SAFileUpSamples/util/viewsrc.asp ...) + TODO: check +CVE-2006-6864 (PHP remote file inclusion vulnerability in E2_header.inc.php in ...) + TODO: check +CVE-2006-6863 (** DISPUTED ** ...) + TODO: check +CVE-2006-6862 (Multiple cross-site scripting (XSS) vulnerabilities in Outfront Spooky ...) + TODO: check +CVE-2006-6861 (Multiple SQL injection vulnerabilities in Outfront Spooky Login 2.7 ...) + TODO: check +CVE-2006-6860 (Buffer overflow in the sendToMythTV function in MythControlServer.c in ...) + TODO: check +CVE-2006-6859 (SQL injection vulnerability in coupon_detail.asp in Website Designs ...) + TODO: check +CVE-2004-2671 (mod.php in eNdonesia 8.3 allows remote attackers to obtain sensitive ...) + TODO: check +CVE-2004-2670 (Multiple cross-site scripting (XSS) vulnerabilities in mod.php in ...) + TODO: check +CVE-2003-1317 (Cross-site scripting (XSS) vulnerability in mod.php in eNdonesia 8.2 ...) + TODO: check +CVE-2003-1316 (mod.php in eNdonesia 8.2 allows remote attackers to obtain sensitive ...) + TODO: check CVE-2006-XXXX [ssmtp password leak] - ssmtp 2.61-10.1 (bug #369542; low) -CVE-2006-6870 [avahi DoS] +CVE-2006-6870 (The consume_labels function in avahi-core/dns.c in Avahi before 0.6.16 ...) - avahi 0.6.16-1 CVE-2007-XXXX [CenterICQ buffer overflow] - centericq 4.21.0-17 @@ -83,7 +371,7 @@ RESERVED CVE-2007-0018 RESERVED -CVE-2007-0017 (Format string vulnerability in VideoLAN VLC 0.8.6 allows user-assisted ...) +CVE-2007-0017 (Multiple format string vulnerabilities in (1) the cdio_log_handler ...) - vlc 0.8.6-svn20061012.debian-1.2 (bug #405425; medium) CVE-2007-0016 (Stack-based buffer overflow in MoviePlay 4.76 allows remote attackers ...) NOT-FOR-US: MoviePlay @@ -111,7 +399,7 @@ NOT-FOR-US: ASPTicker CVE-2006-6847 (An ActiveX control in ierpplug.dll for RealNetworks RealPlayer 10.5 ...) NOT-FOR-US: RealPlayer for Windows -CVE-2006-6846 (Multiple SQL injection vulnerabilities in WYWO - InOut Board 1.0 allow ...) +CVE-2006-6846 (Multiple SQL injection vulnerabilities in While You Were Out (WYWO) ...) NOT-FOR-US: WYWO - InOut Board CVE-2006-6845 (Cross-site scripting (XSS) vulnerability in index.php in CMS Made ...) NOT-FOR-US: CMS Made Simple @@ -394,7 +682,7 @@ NOT-FOR-US: Microsoft CVE-2006-6722 (Bandwebsite (aka Bandsite portal system) 1.5 allows remote attackers ...) NOT-FOR-US: Bandwebsite (aka Bandsite portal system) -CVE-2006-6721 (Cross-site scripting (XSS) vulnerability in shout.php in Knusperleicht ...) +CVE-2006-6721 (Multiple cross-site scripting (XSS) vulnerabilities in shout.php in ...) NOT-FOR-US: Knusperleicht ShoutBox CVE-2006-6720 (PHP remote file inclusion vulnerability in admin/index_sitios.php in ...) NOT-FOR-US: Azucar CMS @@ -1333,8 +1621,8 @@ NOT-FOR-US: deV!L`z Clanportal CVE-2006-6337 (Multiple SQL injection vulnerabilities in giris.asp in Aspee and ...) NOT-FOR-US: Aspee Ziyaretci Defteri -CVE-2006-6336 - RESERVED +CVE-2006-6336 (Heap-based buffer overflow in the Mail Management Server (MAILMA.exe) ...) + TODO: check CVE-2006-6335 (Multiple buffer overflows in Sophos Anti-Virus scanning engine before ...) NOT-FOR-US: Sophos Anti-Virus CVE-2006-6334 (Heap-based buffer overflow in the SendChannelData function in wfica.ocx in ...) @@ -1372,7 +1660,7 @@ RESERVED CVE-2006-6319 RESERVED -CVE-2006-6318 (elogd in elog 2.6.2 and earlier allows remote authenticated users to cause a ...) +CVE-2006-6318 (The show_elog_list function in elogd.c in elog 2.6.2 and earlier ...) {DSA-1242-1} CVE-2006-6317 RESERVED @@ -2115,8 +2403,7 @@ NOT-FOR-US: BlogMe CVE-2006-5975 (Multiple cross-site scripting (XSS) vulnerabilities in comments.asp in ...) NOT-FOR-US: BlogMe -CVE-2006-5974 [fetchmail DoS] - RESERVED +CVE-2006-5974 (fetchmail 6.3.5 and 6.3.6 before 6.3.6-rc4, when refusing a message ...) - fetchmail 6.3.6~rc3-1 CVE-2006-5973 (Off-by-one buffer overflow in Dovecot 1.0test53 through 1.0.rc14, and ...) - dovecot 1.0.rc15-1 @@ -2350,8 +2637,7 @@ CVE-2006-5868 (Multiple buffer overflows in Imagemagick 6.0 before 6.0.6.2, and 6.2 ...) {DSA-1213} - imagemagick 7:6.2.4.5.dfsg1-0.11 -CVE-2006-5867 [fetchmail cannot enforce TLS] - RESERVED +CVE-2006-5867 (fetchmail before 6.3.6-rc4 does not properly enforce TLS and may transmit ...) - fetchmail 6.3.6~rc5-1 CVE-2006-5866 (Directory traversal vulnerability in Mdoc/view-sourcecode.php for ...) NOT-FOR-US: phpManta @@ -2587,8 +2873,8 @@ - linux-2.6 <unfixed> (low) CVE-2006-5756 RESERVED -CVE-2006-5755 - RESERVED +CVE-2006-5755 (Linux kernel before 2.6.18, when running on x86_64 systems, does not ...) + TODO: check CVE-2006-5754 RESERVED CVE-2006-5753 @@ -5286,7 +5572,7 @@ CVE-2006-4538 (Linux kernel 2.6.17 and earlier, when running on IA64 or SPARC ...) {DSA-1237 DSA-1233} - linux-2.6 2.6.17-9 -CVE-2006-4537 (NET$SESSION_CONTROL.EXE before 20060825 in DECnet-Plus in OpenVMS ...) +CVE-2006-4537 (NET$SESSION_CONTROL.EXE in DECnet-Plus in OpenVMS ALPHA 7.3-2 and ...) NOT-FOR-US: OpenVMS CVE-2006-4536 (SQL injection vulnerability in module/rejestracja.php in CMS Frogss ...) NOT-FOR-US: CMS Frogss @@ -6301,10 +6587,10 @@ RESERVED CVE-2006-4099 (Business Objects Crystal Enterprise 9 and 10 generates predictable ...) NOT-FOR-US: Business Objects -CVE-2006-4098 - RESERVED -CVE-2006-4097 - RESERVED +CVE-2006-4098 (Stack-based buffer overflow in the CSRadius service in Cisco Secure Access ...) + TODO: check +CVE-2006-4097 (Multiple unspecified vulnerabilities in the CSRadius service in Cisco Secure ...) + TODO: check CVE-2006-4096 (BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to ...) {DSA-1172-1} - bind <not-affected> (Not vulnerable according to CERT advisory) @@ -48323,7 +48609,7 @@ NOT-FOR-US: Data pre-dating the Security Tracker CVE-1999-1303 (Vulnerability in prwarn in SCO UNIX 4.2 and earlier allows local users ...) NOT-FOR-US: Data pre-dating the Security Tracker -CVE-1999-1302 (Vulnerability in pt_chmod in SCO UNIX 4.2 and earlier allows local ...) +CVE-1999-1302 (Unspecified vulnerability in pt_chmod in SCO UNIX 4.2 and earlier ...) NOT-FOR-US: Data pre-dating the Security Tracker CVE-1999-1300 (Vulnerability in accton in Cray UNICOS 6.1 and 6.0 allows local users ...) NOT-FOR-US: Data pre-dating the Security Tracker