Author: joeyh Date: 2010-09-22 21:15:01 +0000 (Wed, 22 Sep 2010) New Revision: 15364 Modified: data/CVE/list Log: automatic update Modified: data/CVE/list ==================================================================--- data/CVE/list 2010-09-21 21:14:36 UTC (rev 15363) +++ data/CVE/list 2010-09-22 21:15:01 UTC (rev 15364) @@ -1,3 +1,7 @@ +CVE-2010-3478 + RESERVED +CVE-2010-3477 (The tcf_act_police_dump function in net/sched/act_police.c in the ...) + TODO: check CVE-2010-3600 RESERVED CVE-2010-3599 @@ -1186,16 +1190,13 @@ CVE-2010-3095 [mailscanner incomplete fix for CVE-2008-5313] RESERVED - mailscanner <unfixed> (bug #596403) -CVE-2010-3094 [drupal Actions cross site scripting] - RESERVED +CVE-2010-3094 (Multiple cross-site scripting (XSS) vulnerabilities in Drupal 6.x ...) {DSA-2113-1} - drupal6 6.18-1 (low; bug #592716) -CVE-2010-3093 [drupal Comment unpublishing bypass] - RESERVED +CVE-2010-3093 (The comment module in Drupal 5.x before 5.23 and 6.x before 6.18 ...) {DSA-2113-1} - drupal6 6.18-1 (low; bug #592716) -CVE-2010-3092 [drupal File download access bypass] - RESERVED +CVE-2010-3092 (The upload module in Drupal 5.x before 5.23 and 6.x before 6.18 does ...) {DSA-2113-1} - drupal6 6.18-1 (low; bug #592716) CVE-2010-3091 [drupal OpenID authentication bypass] @@ -1230,13 +1231,12 @@ {DSA-2110-1} - linux-2.6 2.6.32-23 (high) NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-3081 -CVE-2010-3080 - RESERVED +CVE-2010-3080 (Double free vulnerability in the snd_seq_oss_open function in ...) {DSA-2110-1} + TODO: check CVE-2010-3079 RESERVED -CVE-2010-3078 [linux: xfs: XFS_IOC_FSGETXATTR ioctl memory leak] - RESERVED +CVE-2010-3078 (The xfs_ioc_fsgetxattr function in fs/xfs/linux-2.6/xfs_ioctl.c in the ...) {DSA-2110-1} - linux-2.6 <unfixed> NOTE: see RH''s bugzilla @@ -1271,8 +1271,8 @@ - samba 2:3.5.5~dfsg-1 (bug #596891) CVE-2010-3068 RESERVED -CVE-2010-3067 - RESERVED +CVE-2010-3067 (Integer overflow in the do_io_submit function in fs/aio.c in the Linux ...) + TODO: check CVE-2010-3066 RESERVED CVE-2010-3064 (Stack-based buffer overflow in the php_mysqlnd_auth_write function in ...) @@ -1560,8 +1560,7 @@ CVE-2010-2943 [xfs infoleak] RESERVED - linux-2.6 <unfixed> -CVE-2010-2942 [linux-2.6 net sched infoleak] - RESERVED +CVE-2010-2942 (The actions implementation in the network queueing functionality in ...) - linux-2.6 <unfixed> [lenny] - linux-2.6 2.6.26-25 CVE-2010-2941 @@ -4522,8 +4521,8 @@ RESERVED CVE-2010-1821 RESERVED -CVE-2010-1820 - RESERVED +CVE-2010-1820 (Apple Filing Protocol (AFP) Server in Apple Mac OS X 10.6.x through ...) + TODO: check CVE-2010-1819 RESERVED CVE-2010-1818 (The IPersistPropertyBag2::Read function in QTPlugin.ocx in Apple ...) @@ -7780,8 +7779,8 @@ RESERVED CVE-2010-0782 RESERVED -CVE-2010-0781 - RESERVED +CVE-2010-0781 (Unspecified vulnerability in the administrative console in IBM ...) + TODO: check CVE-2010-0780 RESERVED CVE-2010-0779 (Cross-site scripting (XSS) vulnerability in the Administration Console ...)