[Secure-testing-commits] r981 - sarge-checks/CAN

[Joey Hess]

Author: joeyh
Date: 2005-05-04 09:14:19 +0000 (Wed, 04 May 2005)
New Revision: 981

Modified:
   sarge-checks/CAN/list
Log:
automatic CAN database update

Modified: sarge-checks/CAN/list
===================================================================
--- sarge-checks/CAN/list	2005-05-04 08:43:56 UTC (rev 980)
+++ sarge-checks/CAN/list	2005-05-04 09:14:19 UTC (rev 981)
@@ -1,3 +1,115 @@
+CAN-2005-1452 (Serendipity before 0.8 allows Chief users to "hide plugins installed ...)
+	TODO: check
+CAN-2005-1451 (The media manager in Serendipity before 0.8 allows remote attackers to ...)
+	TODO: check
+CAN-2005-1450 (Unknown vulnerability in "the function used to validate path-names for ...)
+	TODO: check
+CAN-2005-1449 (Unknown vulnerability in serendipity_config_local.inc.php for ...)
+	TODO: check
+CAN-2005-1448 (Cross-site scripting (XSS) vulnerability in the BBCode plugin for ...)
+	TODO: check
+CAN-2005-1447 (PHP remote code injection vulnerability in main.php in SitePanel 2.6.1 ...)
+	TODO: check
+CAN-2005-1446 (SitePanel 2.6.1 and earlier (SitePanel2) allows remote attackers to ...)
+	TODO: check
+CAN-2005-1445 (Multiple directory traversal vulnerabilities in SitePanel 2.6.1 and ...)
+	TODO: check
+CAN-2005-1444 (Multiple cross-site scripting (XSS) vulnerabilities in SitePanel 2.6.1 ...)
+	TODO: check
+CAN-2005-1443 (Multiple cross-site scripting (XSS) vulnerabilities in index.php for ...)
+	TODO: check
+CAN-2005-1442 (Buffer overflow in the Lotus Notes client for Domino 6.5 before 6.5.4 ...)
+	TODO: check
+CAN-2005-1441 (Format string vulnerability in Lotus Domino 6.0.x before 6.0.5 and ...)
+	TODO: check
+CAN-2005-1440 (Multiple cross-site scripting (XSS) vulnerabilities in ViArt Shop ...)
+	TODO: check
+CAN-2005-1439 (Directory traversal vulnerability in attachments.php in osTicket ...)
+	TODO: check
+CAN-2005-1438 (PHP remote code injection vulnerability in main.php in osTicket allows ...)
+	TODO: check
+CAN-2005-1437 (Multiple SQL injection vulnerabilities in osTicket allow remote ...)
+	TODO: check
+CAN-2005-1436 (Multiple cross-site scripting (XSS) vulnerabilities in osTicket allow ...)
+	TODO: check
+CAN-2005-1435 (Open WebMail (OWM) before 2.51 20050430 allows remote authenticated ...)
+	TODO: check
+CAN-2005-1434 (Multiple unknown vulnerabilities in OpenView Network Node Manager (OV ...)
+	TODO: check
+CAN-2005-1433 (Multiple unknown vulnjerabilities HP OpenView Event Correlation ...)
+	TODO: check
+CAN-2005-1432
+	NOTE: reserved
+CAN-2005-1431 (The "record packet parsing" in GnuTLS 1.2 before 1.2.3 and 1.0 before ...)
+	TODO: check
+CAN-2005-1430 (Mac OS X 10.3.x and earlier uses insecure permissions for a pseudo ...)
+	TODO: check
+CAN-2005-1429 (SQL injection vulnerability in login.asp in WWWguestbook 1.1 allows ...)
+	TODO: check
+CAN-2005-1428 (edit_image.asp in Uapplication Uphotogallery allows remote attackers ...)
+	TODO: check
+CAN-2005-1427 (Uapplication Uphotogallery stores the database under the web document ...)
+	TODO: check
+CAN-2005-1426 (Uapplication Ublog Reload stores the database under the web document ...)
+	TODO: check
+CAN-2005-1425 (Uapplication Uguestbook stores the database under the web document ...)
+	TODO: check
+CAN-2005-1424 (StumbleInside GoText 1.01 stores sensitive username, mail address,and ...)
+	TODO: check
+CAN-2005-1423 (Directory traversal vulnerability in the mail program in 602LAN SUITE ...)
+	TODO: check
+CAN-2005-1422 (Raysoft/Raybase Video Cam Server 1.0.0 beta allows remote attackers to ...)
+	TODO: check
+CAN-2005-1421 (Directory traversal vulnerability in Raysoft/Raybase Video Cam Server ...)
+	TODO: check
+CAN-2005-1420 (Raysoft/Raybase Video Cam Server 1.0.0 beta allows remote attackers to ...)
+	TODO: check
+CAN-2005-1419 (SQL injection vulnerability in the admin login panel for Ocean12 ...)
+	TODO: check
+CAN-2005-1418 (NetLeaf Limited NotJustBrowsing 1.0.3 stores the View Lock Password in ...)
+	TODO: check
+CAN-2005-1417 (Multiple SQL injection vulnerabilities in MaxWebPortal 2.x, 1.35, and ...)
+	TODO: check
+CAN-2005-1416 (Directory traversal vulnerability in 04WebServer 1.81 allows remote ...)
+	TODO: check
+CAN-2005-1415 (Buffer overflow in GlobalSCAPE Secure FTP Server 3.0.2 allows remote ...)
+	TODO: check
+CAN-2005-1414 (ExoticSoft FilePocket 1.2 stores sensitive proxy information, ...)
+	TODO: check
+CAN-2005-1413 (Multiple SQL injection vulnerabilities in enVivo!CMS allow remote ...)
+	TODO: check
+CAN-2005-1412 (SQL injection vulnerability in verify.asp for Ecomm Professional ...)
+	TODO: check
+CAN-2005-1411 (Cybration ICUII 7.0 stores passwords in plaintext in the ...)
+	TODO: check
+CAN-2005-1410 (The tsearch2 module in PostgreSQL 7.4 through 8.0.x declares the (1) ...)
+	TODO: check
+CAN-2005-1409 (PostgreSQL 7.3.x through 8.0.x gives public EXECUTE access to certain ...)
+	TODO: check
+CAN-2005-1408
+	NOTE: reserved
+CAN-2005-1407 (Skype for Windows 1.2.0.0 to 1.2.0.46 allows local users to bypass the ...)
+	TODO: check
+CAN-2005-1406
+	NOTE: reserved
+CAN-2005-1405 (HTTP response splitting vulnerability in the @SetHTTPHeader function ...)
+	TODO: check
+CAN-2005-1404 (MyPHP Forum 1.0 allows remote attackers to spoof the username by ...)
+	TODO: check
+CAN-2005-1403 (Multiple cross-site scripting (XSS) vulnerabilities in JustWilliam's ...)
+	TODO: check
+CAN-2005-1402 (Integer signedness error in certain older versions of the NeL library, ...)
+	TODO: check
+CAN-2005-1401 (Format string vulnerability in the client for Mtp-Target 1.2.2 and ...)
+	TODO: check
+CAN-2005-1400
+	NOTE: reserved
+CAN-2005-1399
+	NOTE: reserved
+CAN-2004-1778 (Skype 0.92.0.12 and 1.0.0.1 for Linux, and possibly other versions, ...)
+	TODO: check
+CAN-2004-1777 (A "range check error" in Skype for Windows before 0.98.0.28 allows ...)
+	TODO: check
 CAN-2005-1398 (phpcart.php in PHPCart 3.2 allows remote attackers to change product ...)
 	NOTE: not-for-us (PHPCart)
 CAN-2005-1397 (SQL injection vulnerability in search.php for PHP-Calendar before ...)
@@ -15,9 +127,11 @@
 	NOTE: have to modify it for his purposes anyway, so there's no security problem
 CAN-2005-1391 (Buffer overflow in the add_port function in APSIS Pound 1.8.2 and ...)
 	- pound (unfixed; bug #306649)
-CAN-2005-1390 (Squid before 2.5.STABLE7, when using persistent connections, allows ...)
+CAN-2005-1390
+	NOTE: rejected
 	- squid 2.5.8-1
-CAN-2005-1389 (HTTP response splitting vulnerability in Squid before 2.5.STABLE7, ...)
+CAN-2005-1389
+	NOTE: rejected
 	- squid 2.5.8-1
 CAN-2005-1388 (Cross-site scripting (XSS) vulnerability in SURVIVOR before 0.9.6 ...)
 	NOTE: not-for-us (SURVIVOR)
@@ -4017,8 +4131,7 @@
 	{DSA-679-1}
 CAN-2005-0158 (Format string vulnerability in bidwatcher before 1.3.17 allows remote ...)
 	{DSA-687-1}
-CAN-2005-0157
-	NOTE: reserved
+CAN-2005-0157 (The confirm add-on in SmartList 3.15 and earlier allows attackers to ...)
 	{DSA-720-1}
 CAN-2005-0156 (Buffer overflow in the PerlIO implementation in Perl 5.8.0, when ...)
 	- perl 5.8.4-6
@@ -4140,8 +4253,8 @@
 	- libpam-radius-auth 1.3.16-3
 CAN-2005-0107 (bsmtpd 2.3 and earlier does not properly sanitize e-mail addresses, ...)
 	{DSA-690-1}
-CAN-2005-0106
-	NOTE: reserved
+CAN-2005-0106 (SSLeay.pm in libnet-ssleay-perl before 1.25 uses the /tmp/entropy file ...)
+	TODO: check
 CAN-2005-0105 (Unknown vulnerability in typespeed 0.4.1 and earlier allows local ...)
 	{DSA-684-1}
 CAN-2005-0104 (Cross-site scripting (XSS) vulnerability in webmail.php in ...)