joeyh at alioth.debian.org
2007-Nov-05 21:14 UTC
[Secure-testing-commits] r7221 - data/CVE
Author: joeyh
Date: 2007-11-05 21:14:10 +0000 (Mon, 05 Nov 2007)
New Revision: 7221
Modified:
data/CVE/list
Log:
automatic update
Modified: data/CVE/list
==================================================================---
data/CVE/list 2007-11-05 14:47:54 UTC (rev 7220)
+++ data/CVE/list 2007-11-05 21:14:10 UTC (rev 7221)
@@ -1,6 +1,22 @@
+CVE-2007-5802 (Directory traversal vulnerability in index.php in Firewolf ...)
+ TODO: check
+CVE-2007-5801 (Unspecified vulnerability in WORK system e-commerce before 4.0.2
has ...)
+ TODO: check
+CVE-2007-5800 (Multiple PHP remote file inclusion vulnerabilities in the ...)
+ TODO: check
+CVE-2007-5799 (Multiple cross-site request forgery (CSRF) vulnerabilities in
...)
+ TODO: check
+CVE-2007-5798 (Multiple cross-site scripting (XSS) vulnerabilities in ...)
+ TODO: check
+CVE-2007-5797 (SQLLoginModule in Apache Geronimo 2.0 through 2.1 does not throw
an ...)
+ TODO: check
+CVE-2007-5796 (Cross-site scripting (XSS) vulnerability in the management
console in ...)
+ TODO: check
+CVE-2007-5794
+ RESERVED
CVE-2007-XXXX [insecure temporary file handling in ircii-pana]
- ircii-pana <unfixed> (low; bug #449149)
-CVE-2007-5795 [emacs22 safe mode bypass]
+CVE-2007-5795 (The hack-local-variables function in Emacs before 22.2, when
...)
- emacs22 22.1+1-2.1 (medium; bug #449008)
NOTE: Emacs 21 is not affected
CVE-2007-XXXX [conffile ietd.conf public readable and contains passwords]
@@ -58,8 +74,7 @@
RESERVED
CVE-2007-5768 (The Globe7 soft phone client 7.3 sends username and password
...)
NOT-FOR-US: Globe7 soft phone client
-CVE-2007-5767
- RESERVED
+CVE-2007-5767 (Heap-based buffer overflow in the Client Trust application ...)
NOT-FOR-US: Geronimo Apache
CVE-2007-5766
RESERVED
@@ -236,6 +251,7 @@
CVE-2002-2365 (Simple WAIS (SWAIS) 1.11 allows remote attackers to execute
arbitrary ...)
NOT-FOR-US: Data pre-dating the Security Tracker
CVE-2007-5740 (The format string protection mechanism in IMAPD for Perdition
Mail ...)
+ {DSA-1398-1}
- perdition 1.17.1-1 (medium; bug #448853)
CVE-2007-5751 (Liferea before 1.4.6 uses weak permissions (0644) for the ...)
- liferea 1.4.6-1 (low; bug #448850)
@@ -594,8 +610,8 @@
RESERVED
CVE-2007-5661
RESERVED
-CVE-2007-5660
- RESERVED
+CVE-2007-5660 (Unspecified vulnerability in the Update Service ActiveX control
in ...)
+ TODO: check
CVE-2007-5659
RESERVED
CVE-2007-5658
@@ -2239,8 +2255,7 @@
{DTSA-67-1}
- nagios-plugins 1.4.8-2.2 (low; bug #445475)
NOTE: Requires the webserver, which has to be checked, to be compromised
-CVE-2007-5197
- RESERVED
+CVE-2007-5197 (Buffer overflow in the Mono.Math.BigInteger class in Mono allows
...)
{DSA-1397-1 DTSA-76-1}
- mono 1.2.5.1-2
CVE-2007-5196 (Unspecified vulnerability in the SSL implementation in Groupwise
...)
@@ -3076,8 +3091,8 @@
NOT-FOR-US: TorrentTrader
CVE-2007-4830 (Cross-site scripting (XSS) vulnerability in
CMD_BANDWIDTH_BREAKDOWN in ...)
NOT-FOR-US: DirectAdmin
-CVE-2007-4829
- RESERVED
+CVE-2007-4829 (Directory traversal vulnerability in the Archive::Tar Perl
module 1.36 ...)
+ TODO: check
CVE-2007-4828 (Cross-site scripting (XSS) vulnerability in the API
pretty-printing ...)
- mediawiki 1.10.2-1 (low; bug #442255)
[etch] - mediawiki <not-affected> (Does not include the vulnerable code)
@@ -9245,7 +9260,7 @@
NOT-FOR-US: Microsoft
CVE-2007-2218 (Unspecified vulnerability in the Windows Schannel Security
Package for ...)
NOT-FOR-US: Microsoft
-CVE-2007-2217 (Unspecified vulnerability in Kodak Image Viewer in Microsoft
Windows ...)
+CVE-2007-2217 (Kodak Image Viewer in Microsoft Windows 2000 SP4, and in some
cases XP ...)
NOT-FOR-US: Kodak Image Viewer
CVE-2007-2216 (The tblinf32.dll (aka vstlbinf.dll) ActiveX control for Internet
...)
NOT-FOR-US: Microsoft Internet Explorer
@@ -50085,7 +50100,7 @@
- vsftpd 2.0.1-1
NOTE: can''t find any mention of the bug being fixed, but vsftpd
doesn''t
NOTE: show the beaviour described in
http://www.securitytracker.com/alerts/2004/Jan/1008628.html
-CVE-2004-0041 (mod-auth-shadow 1.4 and earlier does not properly enforce the
...)
+CVE-2004-0041 (The mod_auth_shadow module 1.4 and earlier does not properly
enforce ...)
{DSA-421}
- mod-auth-shadow 1.4-1
CVE-2004-0039 (Multiple format string vulnerabilities in HTTP Application ...)