[Secure-testing-commits] r2176 - data/CAN

[Joey Hess]

Author: joeyh
Date: 2005-09-25 17:44:41 +0000 (Sun, 25 Sep 2005)
New Revision: 2176

Modified:
   data/CAN/list
Log:
mediawiki is is the archive


Modified: data/CAN/list
===================================================================
--- data/CAN/list	2005-09-25 13:19:10 UTC (rev 2175)
+++ data/CAN/list	2005-09-25 17:44:41 UTC (rev 2176)
@@ -2044,7 +2044,7 @@
 CAN-2005-2397 (Cross-site scripting (XSS) vulnerability in guestbook.php in phpBook ...)
 	NOT-FOR-US: phpBook
 CAN-2005-2396 (Cross-site scripting (XSS) vulnerability in MediaWiki 1.4.6 and ...)
-	- mediawiki <itp> (bug #276057)
+	- mediawiki 1.4.9 (bug #276057)
 CAN-2005-2395 (Mozilla Firefox 1.0.4 and 1.0.5 does not choose the challenge with the ...)
 	- mozilla-firefox <unfixed> (bug #320539; medium)
 	- mozilla <unfixed> (bug #320538; medium)
@@ -2983,7 +2983,7 @@
 CAN-2005-2216 (PHP remote file inclusion vulnerability in gals.php in PhotoGal Photo ...)
 	NOT-FOR-US: PhotoGal
 CAN-2005-2215 (Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.x ...)
-	NOT-FOR-US: MediaWiki
+	- mediawiki 1.4.9
 CAN-2005-2214 (apt-setup in Debian GNU/Linux installs the apt.conf file with insecure ...)
 	- base-config <unfixed> (bug #305142; low)
 CAN-2005-2213 (Buffer overflow in the mms_interp_header function in mms.c in MMS ...)
@@ -3127,11 +3127,11 @@
 CAN-2004-2188 (Cross-site scripting (XSS) vulnerability in DMXReady Site Chassis ...)
 	NOT-FOR-US: DMXReady
 CAN-2004-2187 (Unknown vulnerability in ImagePage for MediaWiki 1.3.5, related to ...)
-	- mediawiki <itp> (bug #276057)
+	- mediawiki 1.4.9 (bug #276057)
 CAN-2004-2186 (SQL injection vulnerability in MediaWiki 1.3.5 allows remote attackers ...)
-	- mediawiki <itp> (bug #276057)
+	- mediawiki 1.4.9 (bug #276057)
 CAN-2004-2185 (Multiple cross-site scripting (XSS) vulnerabilities in MediaWiki 1.3.5 ...)
-	- mediawiki <itp> (bug #276057)
+	- mediawiki 1.4.9 (bug #276057)
 CAN-2004-2184 (Directory traversal vulnerability in Digicraft Yak! server 2.0 through ...)
 	NOT-FOR-US: Digicraft Yak!
 CAN-2004-2183 (Unknown vulnerability in WeHelpBUS 0.1 allows remote attackers to ...)
@@ -3430,7 +3430,7 @@
 CAN-2004-2153 (Multiple unknown vulnerabilities in Real Estate Management Software ...)
 	NOT-FOR-US: Real Estate Management Software
 CAN-2004-2152 (Cross-site scripting (XSS) vulnerability in 'raw' page output mode for ...)
-	- mediawiki <itp> (bug #276057)
+	- mediawiki 1.4.9 (bug #276057)
 CAN-2004-2151 (Chatman 1.1.1 RCL and earlier allows remote attackers to cause a ...)
 	NOT-FOR-US: Chatman
 CAN-2004-2150 (Nettica Corporation INTELLIPEER Email Server 1.01 displays different ...)
@@ -4586,7 +4586,7 @@
 CAN-2005-1889 (Unknown vulnerability in Sun ONE Application Server 6.5 SP1 ...)
 	NOT-FOR-US: Sun ONE
 CAN-2005-1888 (Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.5 ...)
-	- mediawiki <itp> (bug #276057)
+	- mediawiki 1.4.9 (bug #276057)
 CAN-2005-1887 (Unknown vulnerability in the Sun Solaris C library (libc and ...)
 	NOT-FOR-US: Solaris
 CAN-2005-1886 (Cross-site scripting (XSS) vulnerability in view.php in YaPiG 0.92b, ...)
@@ -6991,7 +6991,7 @@
 	- quake2 <unfixed> (bug #280573; low)
 	NOTE: CVE id requested from mitre
 CAN-2005-1245 (Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.2, ...)
-	- mediawiki <itp> (bug #276057)
+	- mediawiki 1.4.9 (bug #276057)
 CAN-2005-1244 (Directory traversal vulnerability in the third party tool from NetIQ, ...)
 	NOT-FOR-US: AS/400 FTP server addon
 CAN-2005-1243 (Directory traversal vulnerability in the third party tool from ...)
@@ -9118,11 +9118,11 @@
 CAN-2005-0537 (Multiple SQL injection vulnerabilities in page.php for iGeneric (iG) ...)
 	NOT-FOR-US: iGeneric (iG) Shop
 CAN-2005-0536 (Directory traversal vulnerability in MediaWiki 1.3.x before 1.3.11 and ...)
-	- mediawiki <itp> (bug #276057)
+	- mediawiki 1.4.9 (bug #276057)
 CAN-2005-0535 (Cross-site request forgery (CSRF) vulnerability in MediaWiki 1.3.x ...)
-	- mediawiki <itp> (bug #276057)
+	- mediawiki 1.4.9 (bug #276057)
 CAN-2005-0534 (Multiple cross-site scripting (XSS) vulnerabilities in MediaWiki 1.3.x ...)
-	- mediawiki <itp> (bug #276057)
+	- mediawiki 1.4.9 (bug #276057)
 CAN-2005-0533 (Heap-based buffer overflow in Trend Micro AntiVirus Library VSAPI ...)
 	NOT-FOR-US: Trend Micro AntiVirus
 CAN-2005-0532 (The reiserfs_copy_from_user_to_file_region function in reiserfs/file.c ...)
@@ -10167,7 +10167,7 @@
 CAN-2004-1406 (SQL injection vulnerability in ikonboard.cgi in Ikonboard 3.1.0 ...)
 	NOT-FOR-US: Ikonboard
 CAN-2004-1405 (MediaWiki 1.3.8 and earlier, when used with Apache mod_mime, does not ...)
-	- mediawiki <itp> (bug #276057)
+	- mediawiki 1.4.9 (bug #276057)
 CAN-2004-1404 (Attachment Mod 2.3.10 module for phpBB, when used with Apache ...)
 	NOT-FOR-US: Attachment Mod for phpBB
 CAN-2004-1403 (PHP remote code injection vulnerability in index.php in GNUBoard 3.39 ...)