Secure testing commits - Jan 2009 - r10967 - data/CVE

Author: joeyh
Date: 2009-01-15 21:14:11 +0000 (Thu, 15 Jan 2009)
New Revision: 10967

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
==================================================================---
data/CVE/list	2009-01-15 21:01:17 UTC (rev 10966)
+++ data/CVE/list	2009-01-15 21:14:11 UTC (rev 10967)
@@ -1,3 +1,17 @@
+CVE-2009-0121 (SQL injection vulnerability in frontpage.php in Goople CMS 1.8.2
...)
+	TODO: check
+CVE-2009-0120 (The IBM WebSphere DataPower XML Security Gateway XS40 with
firmware ...)
+	TODO: check
+CVE-2009-0119 (Buffer overflow in Microsoft Windows XP SP3 allows remote
attackers to ...)
+	TODO: check
+CVE-2009-0118
+	RESERVED
+CVE-2003-1567 (The undocumented TRACK method in Microsoft Internet Information
...)
+	TODO: check
+CVE-2003-1566 (Microsoft Internet Information Services (IIS) 5.0 does not log
...)
+	TODO: check
+CVE-1999-1593 (Windows Internet Naming Service (WINS) allows remote attackers
to ...)
+	TODO: check
 CVE-2009-0117
 	RESERVED
 CVE-2009-0116
@@ -229,8 +243,8 @@
 	NOT-FOR-US: CA Service Metric Analysis r11.0 through r11.1 SP1 and Service
 CVE-2009-0042
 	RESERVED
-CVE-2009-0041
-	RESERVED
+CVE-2009-0041 (IAX2 in Asterisk Open Source 1.2.x before 1.2.31, 1.4.x before
...)
+	TODO: check
 CVE-2008-5867 (Directory traversal vulnerability in Yerba SACphp 6.3 allows
remote ...)
 	NOT-FOR-US: Yerba
 CVE-2008-5866 (The Proxim Wireless Tsunami MP.11 2411 with firmware 3.0.3 has
public ...)
@@ -547,7 +561,7 @@
 CVE-2008-5719 (Cross-site scripting (XSS) vulnerability in Hitachi Groupmax Web
...)
 	NOT-FOR-US: Hitachi
 CVE-2008-5718 (The papd daemon in Netatalk before 2.0.4-beta2 allows remote
attackers ...)
-	{DTSA-183-1}
+	{DSA-1705-1 DTSA-183-1}
 	- netatalk 2.0.4~beta2-1 (medium; bug #510585)
 CVE-2008-5717 (Cross-site scripting (XSS) vulnerability in Hitachi
JP1/Integrated ...)
 	NOT-FOR-US: Hitachi
@@ -2736,10 +2750,10 @@
 	NOT-FOR-US: Microsoft Office Word
 CVE-2008-4836
 	RESERVED
-CVE-2008-4835
-	RESERVED
-CVE-2008-4834
-	RESERVED
+CVE-2008-4835 (SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2
and ...)
+	TODO: check
+CVE-2008-4834 (Buffer overflow in SMB in the Server service in Microsoft
Windows 2000 ...)
+	TODO: check
 CVE-2008-4833
 	RESERVED
 CVE-2008-4832 (rc.sysinit in initscripts 8.12-8.21 and 8.56.15-0.1 on rPath
allows ...)
@@ -4456,7 +4470,7 @@
 	NOTE: http://www.audiocoding.com/patch/main_overflow.diff
 CVE-2008-4115 (TalkBack 2.3.6 allows remote attackers to obtain configuration
...)
 	NOT-FOR-US: TalkBack
-CVE-2008-4114 (srv.sys in Microsoft Windows Vista SP1 allows remote attackers
to ...)
+CVE-2008-4114 (srv.sys in the Server service in Microsoft Windows 2000 SP4, XP
SP2 ...)
 	NOT-FOR-US: Microsoft Windows
 CVE-2008-4113 (The sctp_getsockopt_hmac_ident function in net/sctp/socket.c in
the ...)
 	{DSA-1655-1}