[Secure-testing-commits] r685 - sarge-checks/CAN

[Joey Hess]

Author: joeyh
Date: 2005-03-30 09:14:23 +0000 (Wed, 30 Mar 2005)
New Revision: 685

Modified:
   sarge-checks/CAN/list
Log:
automatic CAN database update

Modified: sarge-checks/CAN/list
===================================================================
--- sarge-checks/CAN/list	2005-03-30 05:58:12 UTC (rev 684)
+++ sarge-checks/CAN/list	2005-03-30 09:14:23 UTC (rev 685)
@@ -1,3 +1,45 @@
+CAN-2005-0936 (Cross-site scripting vulnerability in products1h.php in ESMI PayPal ...)
+	TODO: check
+CAN-2005-0935 (Multiple SQL injection vulnerabilities in ESMI PayPal Storefront ...)
+	TODO: check
+CAN-2005-0934 (Multiple cross-site scripting (XSS) vulnerabilities in WackoWiki R4 ...)
+	TODO: check
+CAN-2005-0933 (Directory traversal vulnerability in auxpage.php for phpCOIN 1.2.1b ...)
+	TODO: check
+CAN-2005-0932 (Multiple SQL injection vulnerabilities in phpCOIN 1.2.1b and earlier ...)
+	TODO: check
+CAN-2005-0931 (PHP remote code injection vulnerability in The Includer 1.0 and 1.1 ...)
+	TODO: check
+CAN-2005-0930 (Cross-site scripting (XSS) vulnerability in message.php in Chatness ...)
+	TODO: check
+CAN-2005-0929 (SQL injection vulnerability in PhotoPost PHP Pro 5.x may allow remote ...)
+	TODO: check
+CAN-2005-0928 (Multiple cross-site scripting (XSS) vulnerabilities in PhotoPost PHP ...)
+	TODO: check
+CAN-2005-0927 (Unknown vulnerability in subs.pl for WebAPP 0.9.9 through 0.9.9.2 has ...)
+	TODO: check
+CAN-2005-0926 (Buffer overflow in Sylpheed before 1.0.4 allows remote attackers to ...)
+	TODO: check
+CAN-2005-0925 (Cross-site scripting (XSS) vulnerability in Ublog 1.0 through 1.0.4 ...)
+	TODO: check
+CAN-2005-0924 (Cross-site scripting (XSS) vulnerability in Adventia E-Data 2.0 allows ...)
+	TODO: check
+CAN-2005-0923 (The SmartScan feature in the Auto-Protect module for Symantec Norton ...)
+	TODO: check
+CAN-2005-0922 (Unknown vulnerability in the Auto-Protect module in Symantec Norton ...)
+	TODO: check
+CAN-2005-0921 (Microsoft Outlook 2002 Connector for IBM Lotus Domino 2.0 allows local ...)
+	TODO: check
+CAN-2005-0920 (Multiple SQL injection vulnerabilities in Bugtracker.NET 2.0.1 allow ...)
+	TODO: check
+CAN-2005-0919 (Adventia Chat 3.1 and Server Pro 3.0 allows remote attackers to inject ...)
+	TODO: check
+CAN-2005-0918
+	NOTE: reserved
+CAN-2005-0917 (PHP remote code injection vulnerability in index_header.php for ...)
+	TODO: check
+CAN-2005-0916 (AIO in the Linux kernel 2.6.11 on the PPC64 or IA64 architectures with ...)
+	TODO: check
 CAN-2005-0915 (Webmasters-Debutants WD Guestbook 2.8 allows remote attackers to ...)
 	NOTE: not-for-us (Webmasters-Debutants WD Guestbook)
 CAN-2005-0914 (Multiple cross-site scripting (XSS) vulnerabilities in CPG Dragonfly ...)
@@ -457,8 +499,7 @@
 	- ethereal 0.10.10-1
 CAN-2005-0764 [Buffer overflow with overly long escape sequences in rxvt-unicode]
 	- rxvt-unicode 5.3-1
-CAN-2005-0763
-	NOTE: reserved
+CAN-2005-0763 (Buffer overflow in Midnight Commander (mc) 4.5.55 and earlier may ...)
 	{DSA-698-1}
 CAN-2005-0762 [imagemagick SGI heap overflow allows arbitrary code execution]
 	- imagemagick 5:6.0.0-1
@@ -1700,6 +1741,7 @@
 CAN-2005-0470 (Buffer overflow in wpa_supplicant before 0.2.7 allows remote attackers ...)
 	- wpasupplicant 0.3.8-1
 CAN-2005-0469 (Buffer overflow in the slc_add_reply function in various BSD-based ...)
+	{DSA-699-1 DSA-697-1}
 	{ DSA-697-1}
 CAN-2005-0468 (Heap-based buffer overflow in the env_opt_add function in telnet.c for ...)
 	TODO: check
@@ -2454,7 +2496,7 @@
 	NOTE: not-for-us (ARCserve Backup)
 CAN-2005-0259 (phpBB 2.0.11, and possibly other versions, with remote avatars and ...)
 	- phpbb2 2.0.12-1
-CAN-2005-0258 (Directory traversal vulnerability in usercp_register.php for phpBB ...)
+CAN-2005-0258 (Directory traversal vulnerability in (1) usercp_register.php and (2) ...)
 	- phpbb2 2.0.12-1
 CAN-2005-0257
 	NOTE: reserved
@@ -3078,7 +3120,7 @@
 	NOTE: not-for-us (Microsoft)
 CAN-2005-0046
 	NOTE: reserved
-CAN-2005-0045 (The Server Message Block (SMB) implementation for Windows 2000, XP, ...)
+CAN-2005-0045 (The Server Message Block (SMB) implementation for Windows NT 4.0, ...)
 	NOTE: not-for-us (Microsoft)
 CAN-2005-0044 (The OLE component in Windows 98, 2000, XP, and Server 2003, and ...)
 	NOTE: not-for-us (Microsoft)