[Secure-testing-commits] r2913 - data/CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2005-12-01 10:25:23 +0000 (Thu, 01 Dec 2005)
New Revision: 2913

Modified:
   data/CVE/list
Log:
otrs CVEfied
inkscape/tmpfile CVEfied


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2005-12-01 10:11:15 UTC (rev 2912)
+++ data/CVE/list	2005-12-01 10:25:23 UTC (rev 2913)
@@ -135,61 +135,60 @@
 	- webmin <unfixed> (bug #341394; medium)
 CVE-2005-3911 (Multiple SQL injection vulnerabilities in calendar.php in BosDates 4.0 ...)
 	NOT-FOR-US: BosDates
-begin claimed by jmm
 CVE-2005-3910 (merchants/index.php in Post Affiliate Pro 2.0.4 and earlier, with ...)
-	TODO: check
+	NOT-FOR-US: Post Affiliate Pro
 CVE-2005-3909 (SQL injection vulnerability in merchants/index.php in Post Affiliate ...)
-	TODO: check
+	NOT-FOR-US: Post Affiliate Pro
 CVE-2005-3908 (Cross-site scripting (XSS) vulnerability in search.php in ...)
-	TODO: check
+	NOT-FOR-US: GhostScripter Amazon Shop
 CVE-2005-3907 (Unspecified vulnerability in Java Runtime Environment in Java JDK and ...)
-	TODO: check
+	NOT-FOR-US: Sun Java
 CVE-2005-3906 (Multiple unspecified vulnerabilities in reflection APIs in Java SDK ...)
-	TODO: check
+	NOT-FOR-US: Sun Java
+	TODO: They're speaking of API issues, check whether free JREs are affected
 CVE-2005-3905 (Unspecified vulnerability in reflection APIs in Java SDK and JRE ...)
-	TODO: check
+	NOT-FOR-US: Sun Java
+	TODO: They're speaking of API issues, check whether free JREs are affected
 CVE-2005-3904 (Unspecified vulnerability in Java Management Extensions (JMX) in Java ...)
-	TODO: check
+	NOT-FOR-US: Sun Java
 CVE-2005-3903
 	RESERVED
 CVE-2005-3902 (Cross-site scripting (XSS) vulnerability in gui/errordocs/index.php in ...)
-	TODO: check
+	NOT-FOR-US: Virtual Hosting Control System 
 CVE-2005-3901 (Macromedia Flash Communication Server MX 1.0 and 1.5 does not ...)
-	TODO: check
+	NOT-FOR-US: Flash MX
 CVE-2005-3900 (Macromedia Breeze Communication Server and Breeze Live Server does 5.1 ...)
-	TODO: check
+	NOT-FOR-US: Macromedia Breeze 
 CVE-2005-3899 (The automatic update feature in Google Talk allows remote attackers to ...)
-	TODO: check
+	NOT-FOR-US: Google Talk
 CVE-2005-3898
 	REJECTED
-	TODO: check
 CVE-2005-3897 (Apple Safari 2.0.2 allows remote attackers to cause a denial of ...)
-	TODO: check
+	NOT-FOR-US: Safari
 CVE-2005-3896 (Mozilla allows remote attackers to cause a denial of service (CPU ...)
-	TODO: check
+	TODO: File a bug against mozilla
 CVE-2005-3895 (Open Ticket Request System (OTRS) 1.0.0 through 1.3.2 and 2.0.0 ...)
-	TODO: check
+	- otrs 2.0.4p01-1 (bug #340352; medium)
 CVE-2005-3894 (Multiple cross-site scripting (XSS) vulnerabilities in index.pl in ...)
-	TODO: check
+	- otrs 2.0.4p01-1 (bug #340352; medium)
 CVE-2005-3893 (Multiple SQL injection vulnerabilities in index.pl in Open Ticket ...)
-	TODO: check
+	- otrs 2.0.4p01-1 (bug #340352; medium)
 CVE-2005-3892 (Gadu-Gadu 7.20 allows remote attackers to eavesdrop on a user via a ...)
-	TODO: check
+	NOT-FOR-US: Gadu-Gadu
 CVE-2005-3891 (Stack-based buffer overflow in Gadu-Gadu 7.20 allows remote attackers ...)
-	TODO: check
+	NOT-FOR-US: Gadu-Gadu
 CVE-2005-3890 (Gadu-Gadu 7.20 allows remote attackers to cause a denial of service ...)
-	TODO: check
+	NOT-FOR-US: Gadu-Gadu
 CVE-2005-3889 (Gadu-Gadu 7.20 allows remote attackers to cause a denial of service ...)
-	TODO: check
+	NOT-FOR-US: Gadu-Gadu
 CVE-2005-3888 (Memory leak in Gadu-Gadu 7.20 allows remote attackers to cause a ...)
-	TODO: check
+	NOT-FOR-US: Gadu-Gadu
 CVE-2005-3887 (Gadu-Gadu 7.20 does not properly handle MS-DOS device names in ...)
-	TODO: check
+	NOT-FOR-US: Gadu-Gadu
 CVE-2005-3886 (Unspecified vulnerability in Cisco Security Agent (CSA) 4.5.0 and ...)
-	TODO: check
+	NOT-FOR-US: Cisco Security Agent 
 CVE-2005-3885 (The ps2epsi extension shell script (ps2epsi.sh) in Inkscape before ...)
-	TODO: check
-end claimed by jmm
+	- inkscape 0.42-1 (bug #321501; low)
 CVE-2005-XXXX [drupal: Unspecified XSS]
 	- drupal 4.5.6-1 (unknown)
 CVE-2005-XXXX [drupal: Protect against IE interpretation flaw]
@@ -629,8 +628,6 @@
 CVE-2004-2569 (ipmenu 0.0.3 before Debian GNU/Linux ipmenu_0.0.3-5 allows local users ...)
 	{DSA-907-1}
 	- ipmenu 0.0.3-5
-CVE-2005-XXXX [Multiple security issues in OTRS]
-	- otrs 2.0.4p01-1 (bug #340352; medium)
 CVE-2005-XXXX [Unspecified new Real/Helix createProcess() issue, no details yet]
 	- helix-player <unfixed> (unknown)
 	NOTE: http://service.real.com/help/faq/security/security111605.html
@@ -4659,8 +4656,6 @@
 	NOT-FOR-US: Trend Micro InterScan VirusWall
 CVE-2005-XXXX [wine: Unsafe use of temporary files in winelauncher]
 	- wine 0.0.20050830-1 (bug #321470; low)
-CVE-2005-XXXX [inkscape: Unsafe temporary file handling in ps2epsi extension]
-	- inkscape 0.42 (bug #321501; low)
 CVE-2005-XXXX [DoS to users to prevent usage of showpartial through _hard_ links]
 	- metamail 2.7-48 (bug #321473; low)
 CVE-2005-XXXX [Insecure usage of temporary files in x11perfcomp and other security issues]