[Secure-testing-commits] r1298 - data/CAN
Joey Hess
joeyh@costa.debian.org
Wed, 29 Jun 2005 09:14:24 +0000
Author: joeyh
Date: 2005-06-29 09:14:21 +0000 (Wed, 29 Jun 2005)
New Revision: 1298
Modified:
data/CAN/list
Log:
automatic CAN database update
Modified: data/CAN/list
===================================================================
--- data/CAN/list 2005-06-28 22:50:59 UTC (rev 1297)
+++ data/CAN/list 2005-06-29 09:14:21 UTC (rev 1298)
@@ -1,3 +1,463 @@
+CAN-2005-2078 (BisonFTP Server V4R1 allows remote authenticated users to cause a ...)
+ TODO: check
+CAN-2005-2077 (Cross-site scripting (XSS) vulnerability in error.asp for Hosting ...)
+ TODO: check
+CAN-2005-2076 (HP Version Control Repository Manager (VCRM) before 2.1.1.730 does not ...)
+ TODO: check
+CAN-2005-2075 (PHP-Fusion 5.0 and 6.0 stores the database file with a predictable ...)
+ TODO: check
+CAN-2005-2074 (Cross-site scripting (XSS) vulnerability in PHP-Fusion 6.0.105 allows ...)
+ TODO: check
+CAN-2005-2073 (Unknown vulnerability in IBM DB2 8.1.4 through 8.1.9 and 8.2.0 through ...)
+ TODO: check
+CAN-2005-2072 (ld.so in Solaris 9 and 10 trusts the LD_AUDIT environment variable in ...)
+ TODO: check
+CAN-2005-2071 (traceroute in Sun Solaris 10 on x86 systems allows local users to ...)
+ TODO: check
+CAN-2005-2070 (The ClamAV Mail fILTER (clamav-milter) 0.84 through 0.85d, when used ...)
+ TODO: check
+CAN-2005-2069
+ NOTE: reserved
+CAN-2005-2068
+ NOTE: reserved
+CAN-2005-2067 (SQL injection vulnerability in article.asp in unknown versions of ...)
+ TODO: check
+CAN-2005-2066 (SQL injection vulnerability in comment_post.asp in ASP Nuke 0.80 ...)
+ TODO: check
+CAN-2005-2065 (HTTP response splitting vulnerability in language_select.asp in ASP ...)
+ TODO: check
+CAN-2005-2064 (Multiple cross-site scripting vulnerabilities in ASP Nuke 0.80 allow ...)
+ TODO: check
+CAN-2005-2063 (Multiple cross-site scripting (XSS) vulnerabilities in ...)
+ TODO: check
+CAN-2005-2062 (Multiple SQL injection vulnerabilities in ActiveBuyAndSell 6.2 allow ...)
+ TODO: check
+CAN-2005-2061 (Infopop UBB.Threads before 6.5.2 Beta allows remote attackers to include ...)
+ TODO: check
+CAN-2005-2060 (Multiple HTTP Response Splitting vulnerabilities in (1) ...)
+ TODO: check
+CAN-2005-2059 (Multiple cross-site request forgery (CSRF) vulnerabilities in (1) ...)
+ TODO: check
+CAN-2005-2058 (Multiple SQL injection vulnerabilities in Infopop UBB.Threads before ...)
+ TODO: check
+CAN-2005-2057 (Multiple cross-site scripting (XSS) vulnerabilities in Infopop ...)
+ TODO: check
+CAN-2005-2056 (The Quantum archive decompressor in Clam AntiVirus (ClamAV) before ...)
+ TODO: check
+CAN-2005-2055 (RealPlayer 8, 10, 10.5 (6.0.12.1040-1069), and Enterprise and RealOne ...)
+ TODO: check
+CAN-2005-2054 (Unknown vulnerability in RealPlayer 10 and 10.5 (6.0.12.1040-1069) and ...)
+ TODO: check
+CAN-2002-1986 (Perception LiteServe 2.0 through 2.0.1 allows remote attackers to ...)
+ TODO: check
+CAN-2002-1985 (iSMTP 5.0.1 allows remote attackers to cause a denial of service via a ...)
+ TODO: check
+CAN-2002-1984 (Microsoft Internet Explorer 5.0.1 through 6.0 on Windows 2000 or ...)
+ TODO: check
+CAN-2002-1983 (The timer implementation in QNX RTOS 6.1.0 allows local users to cause ...)
+ TODO: check
+CAN-2002-1982 (Directory traversal vulnerability in the list_directory function in ...)
+ TODO: check
+CAN-2002-1981 (Microsoft SQL Server 2000 through SQL Server 2000 SP2 allows the ...)
+ TODO: check
+CAN-2002-1980 (Buffer overflow in Volume Manager daemon (vold) of Sun Solaris 2.5.1 ...)
+ TODO: check
+CAN-2002-1979 (WatchGuard SOHO products running firmware 5.1.6 and earlier, and ...)
+ TODO: check
+CAN-2002-1978 (IPFilter 3.1.1 through 3.4.28 allows remote attckers to bypass ...)
+ TODO: check
+CAN-2002-1977 (Network Associates PGP 7.0.4 and 7.1 does not time out according to ...)
+ TODO: check
+CAN-2002-1976 (ifconfig in Linux kernel 2.2 and 2.4 does not report when the network ...)
+ TODO: check
+CAN-2002-1975 (Sharp Zaurus PDA SL-5000D and SL-5500 uses a salt of "A0" to encrypt ...)
+ TODO: check
+CAN-2002-1974 (The FTP service in Zaurus PDAs SL-5000D and SL-5500 does not require ...)
+ TODO: check
+CAN-2002-1973 (Buffer overflow in CHttpServer::OnParseError in the ISAPI extension ...)
+ TODO: check
+CAN-2002-1972 (Unknown vulnerability in Parallel port powerSwitch (aka ...)
+ TODO: check
+CAN-2002-1971 (The ping utility in networking_utils.php in Sourcecraft ...)
+ TODO: check
+CAN-2002-1970 (SnortCenter 0.9.5, when configured to push Snort rules, stores the ...)
+ TODO: check
+CAN-2002-1969 (Magic Notebook 1.0b and 1.1b allows remote attackers to cause a denial ...)
+ TODO: check
+CAN-2002-1968 (Com21 DOXport 1100 series cable modem running firmware 2.1.1.106, and ...)
+ TODO: check
+CAN-2002-1967 (Buffer overflow in XiRCON 1.0 Beta 4 allows remote attackers to cause ...)
+ TODO: check
+CAN-2002-1966 (Directory traversal vulnerability in magiccard.cgi in My Postcards ...)
+ TODO: check
+CAN-2002-1965 (Cross-site scripting (XSS) vulnerability in Errors.gsl in Imatix ...)
+ TODO: check
+CAN-2002-1964 (Unknown vulnerability in WesMo phpEventCalendar 1.1 allows remote ...)
+ TODO: check
+CAN-2002-1963 (Linux kernel 2.4.1 through 2.4.19 sets root's NR_RESERVED_FILES limit ...)
+ TODO: check
+CAN-2002-1962 (Finjan Software SurfinGate 6.0 and 6.0 1 allows remote attackers to ...)
+ TODO: check
+CAN-2002-1961 (Finjan Software SurfinGate 6.0 and 6.0 1 allows remote attackers to ...)
+ TODO: check
+CAN-2002-1960 (Cross-site scripting (XSS) vulnerability in Cybozu Share360 1.1 allows ...)
+ TODO: check
+CAN-2002-1959 (Nagios 1.0b1 through 1.0b3 allows remote attackers to execute ...)
+ TODO: check
+CAN-2002-1958 (Cross-site scripting (XSS) vulnerability in kmMail 1.0 through 1.0b ...)
+ TODO: check
+CAN-2002-1957 (Buffer overflow in the netlog function in pen.c for Pen 0.9.1 and ...)
+ TODO: check
+CAN-2002-1956 (ROX Filer 1.1.9 and 1.2 is installed with world writable permissions, ...)
+ TODO: check
+CAN-2002-1955 (Iomega NAS A300U uses cleartext LANMAN authentication when mounting ...)
+ TODO: check
+CAN-2002-1954 (Cross-site scripting (XSS) vulnerability in the phpinfo function in ...)
+ TODO: check
+CAN-2002-1953 (Heap-based buffer overflow in the goim handler of AOL Instant ...)
+ TODO: check
+CAN-2002-1952 (phpRank 1.8 does not properly check the return codes for MySQL ...)
+ TODO: check
+CAN-2002-1951 (Buffer overflow in GoAhead WebServer 2.1 allows remote attackers to ...)
+ TODO: check
+CAN-2002-1950 (Cross-site scripting (XSS) vulnerability in phpRank 1.8 allows remote ...)
+ TODO: check
+CAN-2002-1949 (The Network Attached Storage (NAS) Administration Web Page for Iomega ...)
+ TODO: check
+CAN-2002-1948 (Multiple buffer overflows in Gringotts 0.5.9 allows local users to ...)
+ TODO: check
+CAN-2002-1947 (Webmin 0.21 through 1.0 uses the same built-in SSL key for all ...)
+ TODO: check
+CAN-2002-1946 (Videsh Sanchar Nigam Limited (VSNL) Integrated Dialer Software ...)
+ TODO: check
+CAN-2002-1945 (Buffer overflow in SmartMail Server 1.0 Beta 10 allows remote ...)
+ TODO: check
+CAN-2002-1944 (Motorola Surfboard 4200 cable modem allows remote attackers to cause a ...)
+ TODO: check
+CAN-2002-1943 (SafeTP 1.46, when network address translation (NAT) is being used, ...)
+ TODO: check
+CAN-2002-1942 (Imatix Xitami 2.5 b5 does not properly terminate certain Keep-Alive ...)
+ TODO: check
+CAN-2002-1941 (Buffer overflow in RadioBird WebServer 4 Everyone 1.28 allows remote ...)
+ TODO: check
+CAN-2002-1940 (LCC-Win32 3.2 compiler, when running on Windows 95, 98, or ME, writes ...)
+ TODO: check
+CAN-2002-1939 (FlashFXP 1.4 prints FTP passwords in plaintext when there are ...)
+ TODO: check
+CAN-2002-1938 (Virgil CGI Scanner 0.9 allows remote attackers to execute arbitrary ...)
+ TODO: check
+CAN-2002-1937 (Symantec Firewall/VPN Appliance 100 through 200R hardcodes the ...)
+ TODO: check
+CAN-2002-1936 (UTStarcom BAS 1000 3.1.10 creates several default or back door ...)
+ TODO: check
+CAN-2002-1935 (Pingtel Xpressa 1.2.5 through 2.0.1 uses predictable (1) Call-ID, (2) ...)
+ TODO: check
+CAN-2002-1934 (Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 2.0.1 ...)
+ TODO: check
+CAN-2002-1933 (The terminal services screensaver for Microsoft Windows 2000 does not ...)
+ TODO: check
+CAN-2002-1932 (Microsoft Windows XP and Windows 2000, when configured to send ...)
+ TODO: check
+CAN-2002-1931 (Cross-site scripting (XSS) vulnerability in PHP Arena paFileDB 1.1.3 ...)
+ TODO: check
+CAN-2002-1930 (Buffer overflow in AN HTTPd 1.38 through 1.4.1c allows remote ...)
+ TODO: check
+CAN-2002-1929 (Cross-site scripting (XSS) vulnerability in pafiledb.php in PHP Arena ...)
+ TODO: check
+CAN-2002-1928 (602Pro LAN SUITE 2002 allows remote attackers to view the directory ...)
+ TODO: check
+CAN-2002-1927 (Aquonics File Manager 1.5 allows users with edit privileges to modify ...)
+ TODO: check
+CAN-2002-1926 (Directory traversal vulnerability in source.php in Aquonics File ...)
+ TODO: check
+CAN-2002-1925 (Tiny Personal Firewall 3.0 through 3.0.6 allows remote attackers to ...)
+ TODO: check
+CAN-2002-1924 (PowerChute plus 5.0.2 creates a "Pwrchute" directory during ...)
+ TODO: check
+CAN-2002-1923 (The default configuration in MySQL 3.20.32 through 3.23.52, when ...)
+ TODO: check
+CAN-2002-1922 (Cross-site scripting (XSS) vulnerability in global.php in Jelsoft ...)
+ TODO: check
+CAN-2002-1921 (The default configuration of MySQL 3.20.32 through 3.23.52, when ...)
+ TODO: check
+CAN-2002-1920 (Buffer overflow in FtpXQ 2.5 allows remote attackers to cause a denial ...)
+ TODO: check
+CAN-2002-1919 (SQL injection vulnerability in shopadmin.asp in VP-ASP 4.0 allows ...)
+ TODO: check
+CAN-2002-1918 (Buffer overflow in Microsoft Active Data Objects (ADO) in Microsoft ...)
+ TODO: check
+CAN-2002-1917 (CRLF injection vulnerability in the "User Profile: Send Email" feature ...)
+ TODO: check
+CAN-2002-1916 (Pirch and RusPirch, when auto-log is enabled, allows remote attackers ...)
+ TODO: check
+CAN-2002-1915 (tip on multiple BSD-based operating systems allows local users to ...)
+ TODO: check
+CAN-2002-1914 (dump 0.4 b10 through b29 allows local users to cause a denial of ...)
+ TODO: check
+CAN-2002-1913 (phptonuke.php in myPHPNuke 1.8.8 allows remote attackers to read ...)
+ TODO: check
+CAN-2002-1912 (SkyStream EMR5000 1.16 through 1.18 does not drop packets or disable ...)
+ TODO: check
+CAN-2002-1911 (ZoneAlarm Pro 3.0 and 3.1, when configured to block all traffic, ...)
+ TODO: check
+CAN-2002-1910 (Click2Learn Ingenium Learning Management System 5.1 and 6.1 uses weak ...)
+ TODO: check
+CAN-2002-1909 (Click2Learn Ingenium Learning Management System 5.1 and 6.1 stores the ...)
+ TODO: check
+CAN-2002-1908 (Microsoft IIS 5.0 and 5.1 allows remote attackers to cause a denial of ...)
+ TODO: check
+CAN-2002-1907 (TelCondex SimpleWebServer 2.06.20817 allows remote attackers to cause ...)
+ TODO: check
+CAN-2002-1906 (The web server for Polycom ViaVideo 2.2 and 3.0 allows remote ...)
+ TODO: check
+CAN-2002-1905 (Buffer overflow in the web server of Polycom ViaVideo 2.2 and 3.0 ...)
+ TODO: check
+CAN-2002-1904 (Buffer overflow in the Log function in util.c in GazTek ghttpd 1.4 ...)
+ TODO: check
+CAN-2002-1903 (Pine 4.2.1 through 4.4.4 puts Unix usernames and/or uid into Sender: ...)
+ TODO: check
+CAN-2002-1902 (CGIForum 1.0 through 1.05 allows remote attackers to cause a denial of ...)
+ TODO: check
+CAN-2002-1901 (Cross-site scripting (XSS) vulnerability in Bodo Bauer BBGallery 1.0 ...)
+ TODO: check
+CAN-2002-1900 (Cross-site scripting (XSS) vulnerability in Pinboard 1.0 allows remote ...)
+ TODO: check
+CAN-2002-1899 (Cross-site scripting (XSS) vulnerability in IceWarp Web Mail 3.3.3 and ...)
+ TODO: check
+CAN-2002-1898 (Terminal 1.3 in Apple Mac OS X 10.2 allows remote attackers to execute ...)
+ TODO: check
+CAN-2002-1897 (MyWebServer 1.0.2 allows remote attackers to cause a denial of service ...)
+ TODO: check
+CAN-2002-1896 (Buffer overflow in Alsaplayer 0.99.71, when installed setuid root, ...)
+ TODO: check
+CAN-2002-1895 (The servlet engine in Jakarta Apache Tomcat 3.3 and 4.0.4, when using ...)
+ TODO: check
+CAN-2002-1894 (Cross-site scripting (XSS) vulnerability in viewtopic.php in phpBB ...)
+ TODO: check
+CAN-2002-1893 (Cross-site scripting (XSS) vulnerability in ArGoSoft Mail Server Pro ...)
+ TODO: check
+CAN-2002-1892 (NETGEAR FVS318 running firmware 1.1 stores the username and password ...)
+ TODO: check
+CAN-2002-1891 (Buffer overflow in IRCIT 0.3.1 IRC client allows remote attackers to ...)
+ TODO: check
+CAN-2002-1890 (rhmask 1.0-9 in Red Hat Linux 7.1 allows local users to overwrite ...)
+ TODO: check
+CAN-2002-1889 (Off-by-one buffer overflow in the context_action function in context.c ...)
+ TODO: check
+CAN-2002-1888 (CommonName Toolbar 3.5.2.0 sends unqualified domain name requests to ...)
+ TODO: check
+CAN-2002-1887 (PHP remote code injection vulnerability in customize.php for ...)
+ TODO: check
+CAN-2002-1886 (TightAuction 3.0 stores config.inc under the web document root with ...)
+ TODO: check
+CAN-2002-1885 (PHP remote code injection vulnerability in showhits.php3 for ...)
+ TODO: check
+CAN-2002-1884 (index.php in Py-Membres 3.1 allows remote attackers to log in as an ...)
+ TODO: check
+CAN-2002-1883 (Trolltech Qt Assistant 1.0 in Trolltech Qt 3.0.3, when loaded from the ...)
+ TODO: check
+CAN-2002-1882 (Unknown vulnerability in AolSecurityPrivate.class in Oracle E-Business ...)
+ TODO: check
+CAN-2002-1881 (Macromedia Flash Player 4.0 r12 through 6.0.47.0 allows remote ...)
+ TODO: check
+CAN-2002-1880 (LokwaBB 1.2.2 allows remote attackers to read arbitrary messages by ...)
+ TODO: check
+CAN-2002-1879 (SQL injection vulnerability in LokwaBB 1.2.2 allows remote attackers ...)
+ TODO: check
+CAN-2002-1878 (PHP remote code injection vulnerability in w-Agora 4.1.3 allows remote ...)
+ TODO: check
+CAN-2002-1877 (NETGEAR FM114P allows remote attackers to bypass access restrictions ...)
+ TODO: check
+CAN-2002-1876 (Microsoft Exchange 2000 allows remote authenticated attackers to cause ...)
+ TODO: check
+CAN-2002-1875 (Entercept Agent 2.5 agent for Windows, released before May 21, 2002, ...)
+ TODO: check
+CAN-2002-1874 (astrocam.cgi in AstroCam 1.7.1 through 2.1.2 allows remote attackers ...)
+ TODO: check
+CAN-2002-1873 (Microsoft Exchange 2000, when used with Microsoft Remote Procedure ...)
+ TODO: check
+CAN-2002-1872 (Microsoft SQL Server 6.0 through 2000, with SQL Authentication ...)
+ TODO: check
+CAN-2002-1871 (pkgadd in Sun Solaris 2.5.1 through 8 installs files setuid/setgid ...)
+ TODO: check
+CAN-2002-1870 (Simple Web Server (SWS) 0.0.4 through 0.1.0 does not properly handle ...)
+ TODO: check
+CAN-2002-1869 (Heysoft EventSave 5.1 and 5.2 and Heysoft EventSave+ 5.1 and 5.2 does ...)
+ TODO: check
+CAN-2002-1868 (Dispair 0.1 and 0.2 allows remote attackers to execute arbitrary shell ...)
+ TODO: check
+CAN-2002-1867 (The default configuration of BizDesign ImageFolio 2.23 through 2.26 ...)
+ TODO: check
+CAN-2002-1866 (Simple Web Server (SWS) 0.0.4 through 0.1.0 does not close file ...)
+ TODO: check
+CAN-2002-1865 (Buffer overflow in the Embedded HTTP server, as used in (1) D-Link ...)
+ TODO: check
+CAN-2002-1864 (Directory traversal vulnerability in Simple Web Server (SWS) 0.0.4 ...)
+ TODO: check
+CAN-2002-1863 (Iomega Network Attached Storage (NAS) A300U, and possibly other ...)
+ TODO: check
+CAN-2002-1862 (SmartMail Server 2.0 allows remote attackers to cause a denial of ...)
+ TODO: check
+CAN-2002-1861 (Sybase Enterprise Application Server 4.0, when running on Windows, ...)
+ TODO: check
+CAN-2002-1860 (Pramati Server 3.0, when running on Windows, allows remote attackers ...)
+ TODO: check
+CAN-2002-1859 (Orion Application Server 1.5.3, when running on Windows, allows remote ...)
+ TODO: check
+CAN-2002-1858 (Oracle Oracle9i Application Server 1.0.2.2 and 9.0.2 through ...)
+ TODO: check
+CAN-2002-1857 (jo! jo Webserver 1.0, when running on Windows, allows remote attackers ...)
+ TODO: check
+CAN-2002-1856 (HP Application Server 8.0, when running on Windows, allows remote ...)
+ TODO: check
+CAN-2002-1855 (Macromedia JRun 3.0 through 4.0, when running on Windows, allows ...)
+ TODO: check
+CAN-2002-1854 (Rlaj whois CGI script (whois.cgi) 1.0 allows remote attackers to ...)
+ TODO: check
+CAN-2002-1853 (Cross-site scripting (XSS) vulnerability in MyNewsGroups 0.4 and 0.4.1 ...)
+ TODO: check
+CAN-2002-1852 (Cross-site scripting (XSS) vulnerability in Monkey 0.5.0 allows remote ...)
+ TODO: check
+CAN-2002-1851 (Buffer overflow in WS_FTP Pro 7.5 allows remote attackers to execute ...)
+ TODO: check
+CAN-2002-1850 (mod_cgi in Apache 2.0.39 and 2.0.40 allows local users and possibly ...)
+ TODO: check
+CAN-2002-1849 (ParaChat Server 4.0 does not log users off if the browser's back ...)
+ TODO: check
+CAN-2002-1848 (TightVNC before 1.2.4 running on Windows stores unencrypted passwords ...)
+ TODO: check
+CAN-2002-1847 (Buffer overflow in mplay32.exe of Microsoft Windows Media Player (WMP) ...)
+ TODO: check
+CAN-2002-1846 (Yet Another Bulletin Board (YaBB) 1.40 and 1.41 does not require a ...)
+ TODO: check
+CAN-2002-1845 (Cross-site scripting (XSS) vulnerability in index.php in Yet Another ...)
+ TODO: check
+CAN-2002-1844 (Microsoft Windows Media Player (WMP) 6.3, when installed on Solaris, ...)
+ TODO: check
+CAN-2002-1843 (Perlbot 1.9.2 allows remote attackers to execute arbitrary commands ...)
+ TODO: check
+CAN-2002-1842 (Perlbot 1.0 beta allows remote attackers to execute arbitrary commands ...)
+ TODO: check
+CAN-2002-1841 (The document management module in NOLA 1.1.1 and 1.1.2 does not ...)
+ TODO: check
+CAN-2002-1840 (irssi IRC client 0.8.4, when downloaded after 14-March-2002, could ...)
+ TODO: check
+CAN-2002-1839 (Trend Micro InterScan VirusWall for Windows NT 3.52 does not record ...)
+ TODO: check
+CAN-2002-1838 (Charities.cron 1.0.2 through 1.6.0 allows local users to write to ...)
+ TODO: check
+CAN-2002-1837 (The getAlbumToDisplay function in idsShared.pm for Image Display ...)
+ TODO: check
+CAN-2002-1836 (The default configuration of Xerox DocuTech 6110 and DocuTech 6115 ...)
+ TODO: check
+CAN-2002-1835 (The default configuration of Xerox DocuTech 6110 and DocuTech 6115 ...)
+ TODO: check
+CAN-2002-1834 (The default configuration of Xerox DocuTech 6110 and DocuTech 6115 ...)
+ TODO: check
+CAN-2002-1833 (The default configurations for DocuTech 6110 and DocuTech 6115 have a ...)
+ TODO: check
+CAN-2002-1832 (Unknown vulnerability in the "ipopts decode" functionality in ...)
+ TODO: check
+CAN-2002-1831 (Microsoft MSN Messenger Service 1.0 through 4.6 allows remote ...)
+ TODO: check
+CAN-2002-1830 (Open Bulletin Board (OpenBB) 1.0.0 RC3 allows remote attackers to ...)
+ TODO: check
+CAN-2002-1829 (Cross-site scripting (XSS) vulnerability in codeparse.php in Open ...)
+ TODO: check
+CAN-2002-1828 (Savant Webserver 3.1 allows remote attackers to cause a denial of ...)
+ TODO: check
+CAN-2002-1827 (Sendmail 8.9.0 through 8.12.3 allows local users to cause a denial of ...)
+ TODO: check
+CAN-2002-1826 (grsecurity 1.9.4 for Linux kernel 2.4.18 allows local users to bypass ...)
+ TODO: check
+CAN-2002-1825 (Format string vulnerability in PerlRTE_example1.pl in WASD 7.1, 7.2.0 ...)
+ TODO: check
+CAN-2002-1824 (Microsoft Internet Explorer 6.0, when handling an expired CA-CERT in a ...)
+ TODO: check
+CAN-2002-1823 (Buffer overflow in the HttpGetRequest function in Zeroo HTTP server ...)
+ TODO: check
+CAN-2002-1822 (IBM HTTP Server 1.0 on AS/400 allows remote attackers to obtain the ...)
+ TODO: check
+CAN-2002-1821 (Ultimate PHP Board (UPB) 1.0 and 1.0b allows remote authenticated ...)
+ TODO: check
+CAN-2002-1820 (register.php in Ultimate PHP Board (UPB) 1.0 and 1.0b uses an ...)
+ TODO: check
+CAN-2002-1819 (Directory traversal vulnerability in TinyHTTPD 0.1 .0 allows remote ...)
+ TODO: check
+CAN-2002-1818 (ezhttpbench.php in eZ httpbench 1.1 allows remote attackers to read ...)
+ TODO: check
+CAN-2002-1817 (Unknown vulnerability in Veritas Cluster Server (VCS) 1.2 for ...)
+ TODO: check
+CAN-2002-1816 (Buffer overflow in the sock_gets function in ATPhttpd 0.4b and earlier ...)
+ TODO: check
+CAN-2002-1815 (Directory traversal vulnerability in source.php and source.cgi in ...)
+ TODO: check
+CAN-2002-1814 (Buffer overflow in efstools in Bonobo, when installed setuid, allows ...)
+ TODO: check
+CAN-2002-1813 (Directory traversal vulnerability in AOL Instant Messenger (AIM) ...)
+ TODO: check
+CAN-2002-1812 (Buffer overflow in gdam123 0.933 and 0.942 allows local users to ...)
+ TODO: check
+CAN-2002-1811 (Belkin F5D6130 Wireless Network Access Point running firmware AP14G8 ...)
+ TODO: check
+CAN-2002-1810 (D-Link DWL-900AP+ Access Point 2.1 and 2.2 allows remote attackers to ...)
+ TODO: check
+CAN-2002-1809 (The default configuration of the Windows binary release of MySQL ...)
+ TODO: check
+CAN-2002-1808 (Cross-site scripting (XSS) vulnerability in Meunity Community System ...)
+ TODO: check
+CAN-2002-1807 (Cross-site scripting (XSS) vulnerability in phpWebSite 0.8.3 allows ...)
+ TODO: check
+CAN-2002-1806 (Cross-site scripting (XSS) vulnerability in Drupal 4.0.0 allows remote ...)
+ TODO: check
+CAN-2002-1805 (Cross-site scripting (XSS) vulnerability in DaCode 1.2.0 allows remote ...)
+ TODO: check
+CAN-2002-1804 (Cross-site scripting (XSS) vulnerability in NPDS 4.8 allows remote ...)
+ TODO: check
+CAN-2002-1803 (Cross-site scripting (XSS) vulnerability in PHP-Nuke 6.0 allows remote ...)
+ TODO: check
+CAN-2002-1802 (Cross-site scripting (XSS) vulnerability in Xoops 1.0 RC3 allows ...)
+ TODO: check
+CAN-2002-1801 (ImageFolio 2.23 through 2.27 allows remote attackers to obtain ...)
+ TODO: check
+CAN-2002-1800 (phpRank 1.8 stores the administrative password in plaintext on the ...)
+ TODO: check
+CAN-2002-1799 (Cross-site scripting (XSS) vulnerability in phpRank 1.8 allows remote ...)
+ TODO: check
+CAN-2002-1798 (MidiCart PHP 1 allows remote attackers to (1) upload arbitrary php ...)
+ TODO: check
+CAN-2002-1797 (ChaiVM for HP color LaserJet 4500 and 4550 or HP LaserJet 4100 and ...)
+ TODO: check
+CAN-2002-1796 (ChaiVM EZloader for HP color LaserJet 4500 and 4550 and HP LaserJet ...)
+ TODO: check
+CAN-2002-1795 (Cross-site scripting (XSS) vulnerability in connect.asp in Microsoft ...)
+ TODO: check
+CAN-2002-1794 (Unknown vulnerability in pam_authz in the LDAP-UX Integration product ...)
+ TODO: check
+CAN-2002-1793 (HTTP Server mod_ssl module running on HP-UX 11.04 with Virtualvault OS ...)
+ TODO: check
+CAN-2002-1792 (Buffer overflow in Fake Identd 0.9 through 1.4 allows remote attackers ...)
+ TODO: check
+CAN-2002-1791 (SGI IRIX 6.5 through 6.5.17 creates temporary desktop files with ...)
+ TODO: check
+CAN-2002-1790 (The SMTP service in Microsoft Internet Information Services (IIS) 4.0 ...)
+ TODO: check
+CAN-2002-1789 (Format string vulnerability in newsx NNTP client before 1.4.8 allows ...)
+ TODO: check
+CAN-2002-1788 (Format string vulnerability in the nn_exitmsg function in nn 6.6.0 ...)
+ TODO: check
+CAN-2002-1787 (Buffer overflow in uux in eoe.sw.uucp package of SGI IRIX 6.5 through ...)
+ TODO: check
+CAN-2002-1786 (SGI IRIX 6.5 through 6.5.14 applies a umask of 022 to root core dumps, ...)
+ TODO: check
+CAN-2002-1785 (Cross-site scripting (XSS) vulnerability in Zeus Administration Server ...)
+ TODO: check
+CAN-2002-1784 (Unknown vulnerability in inetd in HP Tru64 Unix 4.0f through 5.1a ...)
+ TODO: check
+CAN-2002-1783 (CRLF injection vulnerability in PHP 4.2.1 through 4.2.3, when ...)
+ TODO: check
+CAN-2000-1227 (Windows NT 4.0 and Windows 2000 hosts allow remote attackers to cause ...)
+ TODO: check
CAN-2005-XXXX [HTTP request smuggling/spooing in apache2's HTTP proxy mode]
- apache (unfixed; bug pending; medium)
CAN-2005-XXXX [Unspecified DoS vulnerability in dhcpd]
@@ -6563,8 +7023,8 @@
CAN-2005-0202 (Directory traversal vulnerability in the true_path function in ...)
{DSA-674-1}
- mailman 2.1.5-6
-CAN-2005-0201
- NOTE: reserved
+CAN-2005-0201 (D-BUS (dbus) before 0.22 does not properly restrict access to a ...)
+ TODO: check
CAN-2005-0200 (TikiWiki before 1.8.5 does not properly validate files that have been ...)
NOTE: not-for-us (TikiWiki)
CAN-2005-0199 (Integer underflow in the Lists_MakeMask() function in lists.c in ...)