Author: pedrib-guest Date: 2010-01-25 00:27:41 +0000 (Mon, 25 Jan 2010) New Revision: 13904 Modified: data/CVE/list Log: resolved latent issue CVE-2006-1236 Modified: data/CVE/list ==================================================================--- data/CVE/list 2010-01-25 00:09:32 UTC (rev 13903) +++ data/CVE/list 2010-01-25 00:27:41 UTC (rev 13904) @@ -208,8 +208,8 @@ NOT-FOR-US: Docmint CVE-2010-0318 (The replay functionality for ZFS Intent Log (ZIL) in FreeBSD 7.1, 7.2, ...) - kfreebsd-6 <not-affected> (vulnerable code introduced in freebsd 7) - - kfreebsd-7 7.2-10 (bug #566684) - - kfreebsd-8 8.0-2 + - kfreebsd-7 7.2-10 (medium; bug #566684) + - kfreebsd-8 8.0-2 (medium) CVE-2010-0317 (Novell Netware 6.5 SP8 allows remote attackers to cause a denial of ...) NOT-FOR-US: Novell Netware CVE-2010-0316 (Integer overflow in Google SketchUp before 7.1 M2 allows remote ...) @@ -61202,6 +61202,7 @@ CVE-2006-1236 (Buffer overflow in the SetUp function in socket/request.c in CrossFire ...) {DSA-1010-1 DSA-1009-1} - crossfire 1.9.0-2 (medium) + - ilohamail 0.8.14-0rc3sarge1 (medium) CVE-2006-1235 (Directory traversal vulnerability in admin/deleteuser.php in HitHost ...) NOT-FOR-US: HitHost CVE-2006-1234 (SQL injection vulnerability in index.php in DSCounter 1.2, with ...) @@ -63896,14 +63897,14 @@ CVE-2006-0147 (Dynamic code evaluation vulnerability in tests/tmssql.php test script ...) {DSA-1031-1 DSA-1030-1 DSA-1029-1} - libphp-adodb 4.72-0.1 (medium; bug #349985) - - cacti 0.8.6d-1 - - moodle 1.6.3-2 + - cacti 0.8.6d-1 (medium) + - moodle 1.6.3-2 (medium) NOTE: exact moodle fixed version not known, but at least <= 1.6.3-2 CVE-2006-0146 (The server.php test script in ADOdb for PHP before 4.70, as used in ...) {DSA-1031-1 DSA-1030-1 DSA-1029-1} - libphp-adodb 4.72-0.1 (medium; bug #349985) - - cacti 0.8.6d-1 - - moodle 1.6.3-2 + - cacti 0.8.6d-1 (medium) + - moodle 1.6.3-2 (medium) NOTE: exact moodle fixed version not known, but at least <= 1.6.3-2 CVE-2006-0145 (The kernfs_xread function in kernfs in NetBSD 1.6 through 2.1, and ...) NOT-FOR-US: NetBSD