Secure testing commits - Mar 2009 - r11440 - data/CVE

Author: joeyh
Date: 2009-03-18 21:14:10 +0000 (Wed, 18 Mar 2009)
New Revision: 11440

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
==================================================================---
data/CVE/list	2009-03-18 11:56:40 UTC (rev 11439)
+++ data/CVE/list	2009-03-18 21:14:10 UTC (rev 11440)
@@ -1,3 +1,41 @@
+CVE-2009-0939 (Tor before 0.2.0.34 treats incomplete IPv4 addresses as valid,
which ...)
+	TODO: check
+CVE-2009-0938 (Unspecified vulnerability in Tor before 0.2.0.34 allows
directory ...)
+	TODO: check
+CVE-2009-0937 (Unspecified vulnerability in Tor before 0.2.0.34 allows
directory ...)
+	TODO: check
+CVE-2009-0936 (Unspecified vulnerability in Tor before 0.2.0.34 allows
attackers to ...)
+	TODO: check
+CVE-2009-0935 (The inotify_read function in the Linux kernel 2.6 before
2.6.29-rc3 ...)
+	TODO: check
+CVE-2009-0934 (Cross-site scripting (XSS) vulnerability in ejabberd before
2.0.4 ...)
+	TODO: check
+CVE-2009-0933 (Cross-site scripting (XSS) vulnerability in the administrative
...)
+	TODO: check
+CVE-2009-0932 (Directory traversal vulnerability in framework/Image/Image.php
in ...)
+	TODO: check
+CVE-2009-0931 (Cross-site scripting (XSS) vulnerability in the tag cloud search
...)
+	TODO: check
+CVE-2009-0930 (Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP
...)
+	TODO: check
+CVE-2009-0929 (Directory traversal vulnerability in the media manager in
Nucleus CMS ...)
+	TODO: check
+CVE-2009-0928
+	RESERVED
+CVE-2009-0927
+	RESERVED
+CVE-2009-0926 (Unspecified vulnerability in the UFS filesystem functionality in
Sun ...)
+	TODO: check
+CVE-2009-0925 (Unspecified vulnerability in Sun Solaris 10 on SPARC sun4v
systems, ...)
+	TODO: check
+CVE-2009-0924 (Unspecified vulnerability in Sun OpenSolaris snv_39 through
snv_45, ...)
+	TODO: check
+CVE-2009-0923 (Unspecified vulnerability in Kerberos Incremental Propagation in
...)
+	TODO: check
+CVE-2009-0922 (PostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25
allows ...)
+	TODO: check
+CVE-2008-6481 (SQL injection vulnerability in the Versioning component ...)
+	TODO: check
 CVE-2009-0921
 	RESERVED
 CVE-2009-0920
@@ -951,6 +989,7 @@
 	RESERVED
 CVE-2009-0661 [weechat DoS]
 	RESERVED
+	{DSA-1744-1}
 	- weechat 0.2.6.1-1 (medium; bug #519940)
 	[etch] - weechat <not-affected> (vulnerable code not present)
 CVE-2009-0660 (Multiple cross-site scripting (XSS) vulnerabilities in Mahara
1.0 ...)
@@ -20778,10 +20817,10 @@
 	NOT-FOR-US: TIBCO SmartPGM FX
 CVE-2007-5544 (IBM Lotus Notes before 6.5.6, and 7.x before 7.0.3; and Domino
before ...)
 	NOT-FOR-US: IBM Lotus Notes
-CVE-2007-5543
-	RESERVED
-CVE-2007-5542
-	RESERVED
+CVE-2007-5543 (Stack-based buffer overflow in Miranda IM 0.6.8 and 0.7.0 allows
...)
+	TODO: check
+CVE-2007-5542 (Stack-based buffer overflow in Miranda IM 0.6.8 allows remote
...)
+	TODO: check
 CVE-2003-1400 (Cross-site scripting (XSS) vulnerability in the Your_Account
module ...)
 	NOT-FOR-US: PhpNuke
 CVE-2003-1399 (eject 2.0.10, when installed setuid on systems such as SuSE
Linux 7.3, ...)