[Secure-testing-commits] r950 - sarge-checks/CAN
Moritz Muehlenhoff
jmm-guest@costa.debian.org
Sun, 01 May 2005 13:07:25 +0000
Author: jmm-guest
Date: 2005-05-01 13:07:22 +0000 (Sun, 01 May 2005)
New Revision: 950
Modified:
sarge-checks/CAN/list
Log:
Checked some older entries.
Modified: sarge-checks/CAN/list
===================================================================
--- sarge-checks/CAN/list 2005-05-01 12:39:18 UTC (rev 949)
+++ sarge-checks/CAN/list 2005-05-01 13:07:22 UTC (rev 950)
@@ -782,7 +782,7 @@
CAN-2005-1062 (The administration protocol for Kerio WinRoute Firewall 6.x up to ...)
NOTE: not-for-us (Kerio)
CAN-2005-1061 (The secure script in LogWatch before 2.6-2 allows attackers to prevent ...)
- TODO: check
+ - logwatch 5.0-1
CAN-2005-1060 (Unknown vulnerability in the TCP/IP functionality (TCPIP.NLM) in ...)
NOTE: not-for-us (Novell Netware)
CAN-2005-1059 (Linksys WET11 1.5.4 allows remote attackers to change the password ...)
@@ -1908,7 +1908,7 @@
CAN-2005-0685 (Multiple access validation errors in OutStart Participate Enterprise ...)
NOTE: not-for-us (OutStart Participate Enterprise)
CAN-2005-0684 (Multiple buffer overflows in the web tool for MySQL MaxDB before ...)
- TODO: check
+ - maxdb-7.5.00 (unfixed; #306454)
CAN-2005-0683
NOTE: rejected
CAN-2005-0682 (Cross-site scripting (XSS) vulnerability in common.inc in Drupal ...)
@@ -4234,7 +4234,7 @@
CAN-2005-0036
NOTE: reserved
CAN-2005-0035 (The Acrobat web control in Adobe Acrobat and Acrobat Reader 7.0 and ...)
- TODO: check
+ NOTE: not-for-us (Adobe)
CAN-2005-0034 (An "incorrect assumption" in the authvalidated validator function in ...)
NOTE: only affects bind9 9.3.0, we have an earlier version
NOTE: fixed in 9.3.1
@@ -4985,18 +4985,18 @@
NOTE: not-for-us (Apple MacOS)
CAN-2004-1083 (Apache for Apple Mac OS X 10.2.8 and 10.3.6 restricts access to files ...)
NOTE: not-for-us (Apple MacOS)
+CAN-2004-1081 (The Application Framework (AppKit) for Apple Mac OS X 10.2.8 and ...)
+ NOTE: not-for-us (Apple MacOS)
CAN-2004-1082 (mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does ...)
- TODO: check
-CAN-2004-1081 (The Application Framework (AppKit) for Apple Mac OS X 10.2.8 and ...)
NOTE: not-for-us (Apple MacOS)
CAN-2004-1080 (The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, ...)
NOTE: not-for-us (Microsoft)
CAN-2004-1079 (Buffer overflow in (1) ncplogin and (2) ncpmap in nwclient.c for ncpfs ...)
- ncpfs 2.2.5-2
CAN-2004-1078 (Stack-based buffer overflow in the client for Citrix Program ...)
- TODO: check
+ NOTE: not-for-us (Citrix)
CAN-2004-1077 (Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and ...)
- TODO: check
+ NOTE: not-for-us (Citrix)
CAN-2004-1076 (Multiple buffer overflows in the RtConfigLoad function in Atari800 ...)
{DSA-609-1}
- atari800 1.3.2-1
@@ -5372,7 +5372,7 @@
CAN-2004-0929 (Heap-based buffer overflow in the OJPEGVSetField function in ...)
NOTE: tiff3g was removed from debian
CAN-2004-0928 (The Microsoft IIS Connector in JRun 4.0 and Macromedia ColdFusion MX ...)
- TODO: check
+ NOTE: not-for-us (Macromedia)
CAN-2004-0927 (ServerAdmin in Mac OS X 10.2.8 through 10.3.5 uses the same example ...)
NOTE: not-for-us (MacOS)
CAN-2004-0926 (Heap-based buffer overflow in Apple QuickTime on Mac OS 10.2.8 through ...)