[Secure-testing-commits] r3743 - data/CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2006-04-04 14:38:51 +0000 (Tue, 04 Apr 2006)
New Revision: 3743

Modified:
   data/CVE/list
Log:
mysql logging fixed
NFUs


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-04-04 09:14:40 UTC (rev 3742)
+++ data/CVE/list	2006-04-04 14:38:51 UTC (rev 3743)
@@ -1529,48 +1529,46 @@
 CVE-2006-0904
 	RESERVED
 CVE-2006-0903 (MySQL 5.0.18 and earlier allows local users to bypass logging ...)
-	- mysql-dfsg-5.0 <unfixed> (bug #359701)
+	- mysql-dfsg-5.0 5.0.19-3 (bug #359701)
 CVE-2006-0902
 	RESERVED
 CVE-2006-0901 (Unspecified vulnerability in the hsfs filesystem in Solaris 8, 9, and ...)
 	NOT-FOR-US: Solaris
 CVE-2006-0900 (nfsd in FreeBSD 6.0 kernel allows remote attackers to cause a denial ...)
 	- kfreebsd-5 5.4-15
-begin claimed by jmm
 CVE-2006-0899 (Directory traversal vulnerability in index.php in 4Images 1.7.1 and ...)
-	TODO: check
+	NOT-FOR-US: 4Images
 CVE-2006-0898 (Crypt::CBC Perl module 2.16 and earlier, when running in RandomIV ...)
 	{DSA-996-1}
 	- libcrypt-cbc-perl 2.17-1
 CVE-2006-0897 (** DISPUTED ** ...)
-	TODO: check
+	NOT-FOR-US: VCS Virtual Program Management Intranet
 CVE-2006-0896 (Cross-site scripting (XSS) vulnerability in Sources/Register.php in ...)
-	TODO: check
+	NOT-FOR-US: Simple Machine Forum
 CVE-2006-0895 (NOCC Webmail 1.0 allows remote attackers to obtain the installation ...)
-	TODO: check
+	NOT-FOR-US: NOCC Webmail
 CVE-2006-0894 (Multiple cross-site scripting (XSS) vulnerabilities in NOCC Webmail ...)
-	TODO: check
+	NOT-FOR-US: NOCC Webmail
 CVE-2006-0893 (NOCC Webmail 1.0 allows remote attackers to obtain sensitive ...)
-	TODO: check
+	NOT-FOR-US: NOCC Webmail
 CVE-2006-0892 (NOCC Webmail 1.0 stores e-mail attachments in temporary files with ...)
-	TODO: check
+	NOT-FOR-US: NOCC Webmail
 CVE-2006-0891 (Multiple directory traversal vulnerabilities in NOCC Webmail 1.0 allow ...)
-	TODO: check
+	NOT-FOR-US: NOCC Webmail
 CVE-2006-0890 (Directory traversal vulnerability in SpeedProject Squeez 5.1, as used ...)
-	TODO: check
+	NOT-FOR-US: SpeedProject Squeez
 CVE-2006-0889 (Cross-site scripting (XSS) vulnerability in Calcium 3.10.1 allows ...)
-	TODO: check
+	NOT-FOR-US: Calcium
 CVE-2006-0888 (index.php in Invision Power Board (IPB) 2.0.1, with Code Confirmation ...)
-	TODO: check
+	NOT-FOR-US: Invision Power Board
 CVE-2006-0887 (Unspecified vulnerability in PHPLIB 7.4 allows remote attackers to ...)
-	TODO: check
+	NOT-FOR-US: PHPLIB
 CVE-2006-0886 (Cross-site scripting (XSS) vulnerability in register.php in DEV web ...)
-	TODO: check
+	NOT-FOR-US: DEV web management system
 CVE-2006-0885 (Cross-site scripting (XSS) vulnerability in show_news.php in CuteNews ...)
-	TODO: check
+	NOT-FOR-US: CuteNews
 CVE-2006-0884 (The WYSIWYG rendering engine in Mozilla Thunderbird 1.0.7 and earlier ...)
 	TODO: check
-end claimed by jmm
 CVE-2003-1295 (Unspecified vulnerability in xscreensaver 4.12, and possibly other ...)
 	TODO: check
 CVE-2003-1294 (Xscreensaver before 4.15 creates temporary files insecurely in (1) ...)