Secure testing commits - Sep 2007 - r6543 - data/CVE

Author: joeyh
Date: 2007-09-07 21:14:07 +0000 (Fri, 07 Sep 2007)
New Revision: 6543

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
==================================================================---
data/CVE/list	2007-09-07 20:44:50 UTC (rev 6542)
+++ data/CVE/list	2007-09-07 21:14:07 UTC (rev 6543)
@@ -1,4 +1,38 @@
-CVE-2007-4743 [Incorrect fix for CVE-2007-3999: buffer overflow in RPC library]
+CVE-2007-4748 (Buffer overflow in the PowerPlayer.dll ActiveX control in
PPStream ...)
+	TODO: check
+CVE-2007-4747 (The telnet service in Cisco Video Surveillance IP Gateway ...)
+	TODO: check
+CVE-2007-4746 (The Cisco Video Surveillance IP Gateway Encoder/Decoder
(Standalone ...)
+	TODO: check
+CVE-2007-4745 (Multiple cross-site scripting (XSS) vulnerabilities in the
AkoBook ...)
+	TODO: check
+CVE-2007-4744 (PHP remote file inclusion vulnerability in environment.php in
...)
+	TODO: check
+CVE-2007-4742 (Claroline before 1.8.6 allows remote authenticated
administrators to ...)
+	TODO: check
+CVE-2007-4741 (Cross-site scripting (XSS) vulnerability in admin/adminusers.php
in ...)
+	TODO: check
+CVE-2007-4740 (The HPRevolutionRegistryManager ActiveX control in ...)
+	TODO: check
+CVE-2007-4739 (reprepro 1.3.0 through 2.2.3 does not properly verify signatures
when ...)
+	TODO: check
+CVE-2007-4738 (Multiple PHP remote file inclusion vulnerabilities in SpeedTech
PHP ...)
+	TODO: check
+CVE-2007-4737 (Multiple PHP remote file inclusion vulnerabilities in SpeedTech
PHP ...)
+	TODO: check
+CVE-2007-4736 (SQL injection vulnerability in category.php in CartKeeper CKGold
...)
+	TODO: check
+CVE-2007-4735 (Buffer overflow in Next Generation Software Virtual DJ (VDJ) 5.0
...)
+	TODO: check
+CVE-2007-4734 (Buffer overflow in Ots Labs OTSTurntables 1.00 allows
user-assisted ...)
+	TODO: check
+CVE-2007-4733 (The Aztech DSL600EU router, when WAN access to the web interface
is ...)
+	TODO: check
+CVE-2007-4732 (Unspecified vulnerability in the strfreectty function in the
Special ...)
+	TODO: check
+CVE-2004-2685 (Buffer overflow in YoungZSoft CCProxy 6.2 and earlier allows
remote ...)
+	TODO: check
+CVE-2007-4743 (The original patch for CVE-2007-3999 in svc_auth_gss.c in the
...)
 	{DSA-1367-1}
 	- krb5 1.6.dfsg.1-7 (high; bug #441209)
 	- librpcsecgss <unfixed>
@@ -559,8 +593,8 @@
 	RESERVED
 CVE-2007-4473
 	RESERVED
-CVE-2007-4472
-	RESERVED
+CVE-2007-4472 (Multiple buffer overflows in the Broderbund Expressit
3DGreetings ...)
+	TODO: check
 CVE-2007-4471 (Multiple unspecified vulnerabilities in the Intuit QuickBooks
Online ...)
 	TODO: check
 CVE-2007-4470
@@ -1774,8 +1808,8 @@
 	RESERVED
 CVE-2007-3914
 	RESERVED
-CVE-2007-3913 [gforge sql injection]
-	{DTSA-56-1}
+CVE-2007-3913 (SQL injection vulnerability in Gforge before 3.1 allows remote
...)
+	{DTSA-57-1}
 	- gforge 4.6.99+svn6086-1
 CVE-2007-3912 [debian-goodies checkrestart missing shell metachar escaping]
 	RESERVED
@@ -2152,8 +2186,8 @@
 	RESERVED
 CVE-2007-3753
 	RESERVED
-CVE-2007-3752
-	RESERVED
+CVE-2007-3752 (Buffer overflow in Apple iTunes before 7.4 allows remote
attackers to ...)
+	TODO: check
 CVE-2007-3751
 	RESERVED
 CVE-2007-3750