Author: joeyh
Date: 2009-04-28 21:14:16 +0000 (Tue, 28 Apr 2009)
New Revision: 11738
Modified:
data/CVE/list
Log:
automatic update
Modified: data/CVE/list
==================================================================---
data/CVE/list 2009-04-28 20:04:50 UTC (rev 11737)
+++ data/CVE/list 2009-04-28 21:14:16 UTC (rev 11738)
@@ -1,3 +1,43 @@
+CVE-2009-1449 (Stack-based buffer overflow in PortableApps CoolPlayer Portable
(aka ...)
+ TODO: check
+CVE-2009-1448 (Cross-site scripting (XSS) vulnerability in apricot.php in
LovPop.net ...)
+ TODO: check
+CVE-2009-1447 (Unrestricted file upload vulnerability in admin/editor/image.php
in ...)
+ TODO: check
+CVE-2009-1446 (Unrestricted file upload vulnerability in upload.php in
Elkagroup ...)
+ TODO: check
+CVE-2009-1445 (Multiple directory traversal vulnerabilities in WebPortal CMS
0.8-beta ...)
+ TODO: check
+CVE-2009-1444 (PHP remote file inclusion vulnerability in indexk.php in
WebPortal CMS ...)
+ TODO: check
+CVE-2009-1443 (Multiple unspecified vulnerabilities in the Server component in
OCS ...)
+ TODO: check
+CVE-2009-1442
+ RESERVED
+CVE-2009-1441
+ RESERVED
+CVE-2009-1440 (Incomplete blacklist vulnerability in DownloadListCtrl.cpp in
amule ...)
+ TODO: check
+CVE-2009-1439 (Buffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel
...)
+ TODO: check
+CVE-2009-1438 (Integer overflow in the CSoundFile::ReadMed function ...)
+ TODO: check
+CVE-2009-1437 (Stack-based buffer overflow in PortableApps CoolPlayer Portable
(aka ...)
+ TODO: check
+CVE-2009-1436 (The db interface in libc in FreeBSD 6.3, 6.4, 7.0, 7.1, and ...)
+ TODO: check
+CVE-2009-1435 (NTRtScan.exe in Trend Micro OfficeScan Client 8.0 SP1 and 8.0
SP1 ...)
+ TODO: check
+CVE-2009-1434
+ RESERVED
+CVE-2008-6756 (ZoneMinder 1.23.3 on Gentoo Linux uses 0644 permissions for ...)
+ TODO: check
+CVE-2008-6755 (ZoneMinder 1.23.3 on Fedora 10 sets the ownership of
/etc/zm.conf to ...)
+ TODO: check
+CVE-2008-6754 (The Personal Sticky Threads addon 1.0.3c for vBulletin allows
remote ...)
+ TODO: check
+CVE-2008-6753 (SQL injection vulnerability in SilverStripe before 2.2.2 allows
remote ...)
+ TODO: check
CVE-2009-1433 (SQL injection vulnerability in File::find (filesystem/File.php)
in ...)
TODO: check
CVE-2009-1432
@@ -253,6 +293,7 @@
- git-core 1.6.2.1-1 (bug #516669)
CVE-2009-1341
RESERVED
+ {DSA-1780-1}
- libdb-pg-perl 2.1.3-1
CVE-2009-1340
RESERVED
@@ -955,10 +996,10 @@
[etch] - apache2 <not-affected> (introduced in 2.2.11)
[lenny] - apache2 <not-affected> (introduced in 2.2.11)
NOTE: Will be fixed in 2.2.12
-CVE-2009-1190
- RESERVED
-CVE-2009-1189
- RESERVED
+CVE-2009-1190 (Algorithmic complexity vulnerability in the ...)
+ TODO: check
+CVE-2009-1189 (The _dbus_validate_signature_with_reason function ...)
+ TODO: check
CVE-2009-1188 (Integer overflow in the JBIG2 decoding feature in Poppler before
...)
- poppler 0.10.6-1 (medium; bug #524806)
CVE-2009-1187 (Integer overflow in the JBIG2 decoding feature in Poppler before
...)
@@ -1567,7 +1608,7 @@
NOT-FOR-US: Oracle PeopleSoft Enterprise
CVE-2009-1013 (Unspecified vulnerability in the PeopleSoft Enterprise
PeopleTools ...)
NOT-FOR-US: Oracle PeopleSoft Enterprise
-CVE-2009-1012 (Unspecified vulnerability in the WebLogic Server component in
BEA ...)
+CVE-2009-1012 (Unspecified vulnerability in the plug-ins for Apache and IIS web
...)
NOT-FOR-US: BEA Product Suite
CVE-2009-1011 (Unspecified vulnerability in the Outside In Technology component
in ...)
NOT-FOR-US: Oracle Application Server
@@ -2811,6 +2852,7 @@
- mahara 1.1.3-1 (low)
CVE-2009-0663
RESERVED
+ {DSA-1780-1}
- libdb-pg-perl 2.1.3-1
CVE-2009-0662 (The PlonePAS product 3.x before 3.9 and 3.2.x before 3.2.2, a
product ...)
- plone3 <unfixed> (medium; bug #525943)
@@ -3099,7 +3141,8 @@
NOTE: Alleged exploit does not work.
CVE-2008-6177 (Multiple directory traversal vulnerabilities in LightBlog 9.8,
when ...)
NOT-FOR-US: LightBlog
-CVE-2008-6176 (bootstrap.inc in Drupal 5.x before 5.12 and 6.x before 6.6, when
the ...)
+CVE-2008-6176
+ REJECTED
- drupal5 5.12-1 (low; bug #519114)
- drupal6 6.6-1 (low; bug #519115)
CVE-2008-6175 (SilverSHielD 1.0.2.34 allows remote attackers to cause a denial
of ...)
@@ -3110,7 +3153,7 @@
NOT-FOR-US: ClipShare Pro
CVE-2008-6172 (Directory traversal vulnerability in captcha/captcha_image.php
in the ...)
NOT-FOR-US: Joomla!
-CVE-2008-6171 (Drupal 5.x before 5.12 and 6.x before 6.6, when the server is
...)
+CVE-2008-6171 (includes/bootstrap.inc in Drupal 5.x before 5.12 and 6.x before
6.6, ...)
TODO: check back with mitre
NOTE: looks like a dupe of CVE-2008-6176
CVE-2008-6170 (Cross-site scripting (XSS) vulnerability in Drupal 5.x before
5.12 and ...)