[Secure-testing-commits] r2722 - data/CVE

[Neil McGovern]

Author: neilm
Date: 2005-11-13 17:09:22 +0000 (Sun, 13 Nov 2005)
New Revision: 2722

Modified:
   data/CVE/list
Log:
Did (all but one) 2002 TODO:s


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2005-11-13 16:00:41 UTC (rev 2721)
+++ data/CVE/list	2005-11-13 17:09:22 UTC (rev 2722)
@@ -19119,9 +19119,7 @@
 	NOTE: according to http://www.securityfocus.com/archive/1/297419
 	NOTE: phpBB versions above 2.0.0 are not vulnerable.
 CVE-2002-1534 (Macromedia Flash Player allows remote attackers to read arbitrary ...)
-	NOTE: Don't know if macromedia flash player is still vulnerable
-	NOTE: see: http://www.securityfocus.com/archive/1/294206
-	TODO: check
+	NOTE: only affects flash 6.0 - 6.0.47.0, which is not in Debian
 CVE-2002-1532 (The administrative web interface (STEMWADM) for SurfControl SuperScout ...)
 	NOT-FOR-US: surfcontrol
 CVE-2002-1531 (The administrative web interface (STEMWADM) for SurfControl SuperScout ...)
@@ -19632,10 +19630,12 @@
 	{DSA-254}
 CVE-2002-1050 (Buffer overflow in HylaFAX faxgetty before 4.1.3 allows remote ...)
 	{DSA-148}
-	TODO: check
+	- hylafax 4.1.2-2.1
+	[woody] - hylafax 4.1.1-1.1
 CVE-2002-1049 (Format string vulnerability in HylaFAX faxgetty before 4.1.3 allows ...)
 	{DSA-148}
-	TODO: check
+	- hylafax 4.1.2-2.1
+	[woody] - hylafax 4.1.1-1.1
 CVE-2002-1046 (Dynamic VPN Configuration Protocol service (DVCP) in Watchguard ...)
 	NOT-FOR-US: Watchguard Firebox firmware
 CVE-2002-1039 (Directory traversal vulnerability in Double Choco Latte (DCL) before ...)
@@ -19772,7 +19772,8 @@
 	NOT-FOR-US: Cisco
 CVE-2002-0847 (tinyproxy HTTP proxy 1.5.0, 1.4.3, and earlier allows remote attackers ...)
 	{DSA-145}
-	TODO: check
+	- tinyproxy 1.4.3-3
+	[woody] - tinyproxy 1.4.3-2woody2
 CVE-2002-0846 (The decoder for Macromedia Shockwave Flash allows remote attackers to ...)
 	- flashplugin-nonfree 6.0.47
 CVE-2002-0845 (Buffer overflow in Sun ONE / iPlanet Web Server 4.1 and 6.0 allows ...)
@@ -19805,10 +19806,12 @@
 	NOT-FOR-US: Windows
 CVE-2002-0818 (wwwoffled in World Wide Web Offline Explorer (WWWOFFLE) allows remote ...)
 	{DSA-144}
-	TODO: check
+	- wwwoffle 2.7d-1
+	[woody] - wwwoffle 2.7a-1.2
 CVE-2002-0817 (Format string vulnerability in super for Linux allows local users to ...)
 	{DSA-139}
-	TODO: check
+	- super 3.18.0-3
+	[woody] - super 3.16.1-1.2 
 CVE-2002-0816 (Buffer overflow in su in Tru64 Unix 5.x allows local users to gain ...)
 	NOT-FOR-US: HP Tru64
 CVE-2002-0814 (Buffer overflow in VMware Authorization Service for VMware GSX Server ...)
@@ -19961,9 +19964,11 @@
 	{DSA-160}
 CVE-2002-0658 (OSSP mm library (libmm) before 1.2.0 allows the local Apache user to ...)
 	{DSA-137}
-	TODO: check
+	- libmm11 1.1.3-6.1
+	- libmm13 1.3.1-1
 CVE-2002-0653 (Off-by-one buffer overflow in rewrite_command hook for mod_ssl Apache ...)
-	TODO: check
+	{DSA-135}
+	- libapache-mod-ssl 2.8.9-2
 STOP: this is approximatly the release of woody, so we can stop here
 CVE-2002-0651 (Buffer overflow in the DNS resolver code used in libc, glibc, and ...)
 CVE-2002-0650 (The keep-alive mechanism for Microsoft SQL Server 2000 allows remote ...)