Author: joeyh
Date: 2009-06-25 21:14:29 +0000 (Thu, 25 Jun 2009)
New Revision: 12203
Modified:
data/CVE/list
Log:
automatic update
Modified: data/CVE/list
==================================================================---
data/CVE/list 2009-06-25 20:56:23 UTC (rev 12202)
+++ data/CVE/list 2009-06-25 21:14:29 UTC (rev 12203)
@@ -1,3 +1,53 @@
+CVE-2009-2209 (SQL injection vulnerability in rscms_mod_newsview.php in RS-CMS
2.1 ...)
+ TODO: check
+CVE-2009-2208 (FreeBSD 6.3, 6.4, 7.1, and 7.2 does not enforce permissions on
the ...)
+ TODO: check
+CVE-2009-2207
+ RESERVED
+CVE-2009-2206
+ RESERVED
+CVE-2009-2205
+ RESERVED
+CVE-2009-2204
+ RESERVED
+CVE-2009-2203
+ RESERVED
+CVE-2009-2202
+ RESERVED
+CVE-2009-2201
+ RESERVED
+CVE-2009-2200
+ RESERVED
+CVE-2009-2199
+ RESERVED
+CVE-2009-2198
+ RESERVED
+CVE-2009-2197
+ RESERVED
+CVE-2009-2196
+ RESERVED
+CVE-2009-2195
+ RESERVED
+CVE-2009-2194
+ RESERVED
+CVE-2009-2193
+ RESERVED
+CVE-2009-2192
+ RESERVED
+CVE-2009-2191
+ RESERVED
+CVE-2009-2190
+ RESERVED
+CVE-2009-2189
+ RESERVED
+CVE-2009-2188
+ RESERVED
+CVE-2009-2187 (Multiple memory leaks in the (1) IP and (2) IPv6 multicast ...)
+ TODO: check
+CVE-2009-2186 (Unspecified vulnerability in Adobe Shockwave Player before
11.0.0.465 ...)
+ TODO: check
+CVE-2009-2185 (The ASN.1 parser (pluto/asn1.c, libstrongswan/asn1/asn1.c, ...)
+ TODO: check
CVE-2009-XXXX [request-tracker: root priviledges for dialog]
- request-tracker3.4 <removed> (low; bug #534498)
[etch] - request-tracker3.4 <not-affected> (flaw introduced in 3.6.2)
@@ -317,10 +367,10 @@
RESERVED
CVE-2009-2047
RESERVED
-CVE-2009-2046
- RESERVED
-CVE-2009-2045
- RESERVED
+CVE-2009-2046 (The embedded web server on the Cisco Video Surveillance 2500
Series IP ...)
+ TODO: check
+CVE-2009-2045 (The Cisco Video Surveillance Stream Manager firmware before 5.3,
as ...)
+ TODO: check
CVE-2009-2044 (Mozilla Firefox 3.0.10 and earlier on Linux allows remote
attackers to ...)
- xulrunner <unfixed> (unknown)
TODO: check on the details once the Mozilla bug has been made public
@@ -693,14 +743,14 @@
RESERVED
CVE-2009-1889
RESERVED
-CVE-2009-1888 [samba Uninitialized read of a data value]
- RESERVED
+CVE-2009-1888 (The acl_group_override function in smbd/posix_acls.c in smbd in
Samba ...)
+ {DSA-1823-1}
- samba <unfixed>
[etch] - samba <not-affected> (Vulnerable code not present)
CVE-2009-1887
RESERVED
-CVE-2009-1886 [samba Formatstring vulnerability in smbclient]
- RESERVED
+CVE-2009-1886 (Multiple format string vulnerabilities in client/client.c in
smbclient ...)
+ {DSA-1823-1}
- samba <not-affected> (Only affects 3.2.x branch)
[lenny] - samba <unfixed>
[etch] - samba <not-affected> (Vulnerable code not present)
@@ -760,8 +810,8 @@
RESERVED
CVE-2009-1861 (Multiple heap-based buffer overflows in Adobe Reader 7 and
Acrobat 7 ...)
NOT-FOR-US: Adobe Reader
-CVE-2009-1860
- RESERVED
+CVE-2009-1860 (Unspecified vulnerability in Adobe Shockwave Player before
11.5.0.600 ...)
+ TODO: check
CVE-2009-1859 (Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and
Acrobat ...)
NOT-FOR-US: Adobe Reader
CVE-2009-1858 (The JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3,
Adobe ...)
@@ -3101,8 +3151,8 @@
RESERVED
CVE-2009-1164
RESERVED
-CVE-2009-1163
- RESERVED
+CVE-2009-1163 (Memory leak on the Cisco Physical Access Gateway with software
before ...)
+ TODO: check
CVE-2009-1162 (Cross-site scripting (XSS) vulnerability in the Spam Quarantine
login ...)
NOT-FOR-US: Cisco IronPort AsyncOS
CVE-2009-1161 (Directory traversal vulnerability in the TFTP service in Cisco
...)
@@ -3126,11 +3176,13 @@
CVE-2009-1152 (Siemens Gigaset SE461 WiMAX router 1.5-BL024.9.6401, and
possibly ...)
NOT-FOR-US: Siemens router
CVE-2009-1151 (Static code injection vulnerability in setup.php in phpMyAdmin
2.11.x ...)
+ {DSA-1824-1}
- phpmyadmin 4:3.1.3.1-1
[lenny] - phpmyadmin <unfixed> (unimportant)
[etch] - phpmyadmin <unfixed> (unimportant)
NOTE: in Debian only accessible for administrator
CVE-2009-1150 (Multiple cross-site scripting (XSS) vulnerabilities in the
export page ...)
+ {DSA-1824-1}
- phpmyadmin 4:3.1.3.1-1
CVE-2009-1149 (CRLF injection vulnerability in bs_disp_as_mime_type.php in the
BLOB ...)
- phpmyadmin 4:3.1.3.1-1
@@ -3903,8 +3955,8 @@
RESERVED
CVE-2009-0904
RESERVED
-CVE-2009-0903
- RESERVED
+CVE-2009-0903 (IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.3, and
the ...)
+ TODO: check
CVE-2009-0902
RESERVED
CVE-2009-0901
@@ -7180,7 +7232,7 @@
RESERVED
CVE-2009-0089 (Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000
SP4, XP ...)
NOT-FOR-US: Microsoft Windows
-CVE-2009-0088 (The WordPerfect 6.x Converter in Microsoft Office Word 2000 SP3
and ...)
+CVE-2009-0088 (The WordPerfect 6.x Converter (WPFT632.CNV, 1998.1.27.0) in
Microsoft ...)
NOT-FOR-US: Microsoft Office
CVE-2009-0087 (Unspecified vulnerability in the Word 6 text converter in
WordPad in ...)
NOT-FOR-US: Microsoft Word