[Secure-testing-commits] r3748 - data/CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2006-04-04 15:50:13 +0000 (Tue, 04 Apr 2006)
New Revision: 3748

Modified:
   data/CVE/list
Log:
new acidbase issue


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-04-04 15:38:09 UTC (rev 3747)
+++ data/CVE/list	2006-04-04 15:50:13 UTC (rev 3748)
@@ -191,46 +191,45 @@
 	NOT-FOR-US: Microsoft
 CVE-2006-1510 (Buffer overflow in calloc.c in the Microsoft Windows XP SP2 ntdll.dll ...)
 	NOT-FOR-US: Microsoft
-begin claimed by jmm
 CVE-2006-1509 (/sbin/passwd in HP-UX B.11.00, B.11.11, and B.11.23 before 20060326 ...)
-	TODO: check
+	NOT-FOR-US: HP-UX
 CVE-2006-1508 (Multiple cross-site scripting (XSS) vulnerabilities in MH Software ...)
-	TODO: check
+	NOT-FOR-US: MH Software Connect Daily Web Calendar
 CVE-2006-1507 (Cross-site scripting (XSS) vulnerability in PHPKIT 1.6.03 allows ...)
-	TODO: check
+	NOT-FOR-US: PHPKIT
 CVE-2006-1506 (Unspecified vulnerability in rsh in Sun Microsystems Sun Grid Engine ...)
-	TODO: check
+	NOT-FOR-US: Sun Microsystems Sun Grid Engine 5.3
 CVE-2006-1505 (base_maintenance.php in Basic Analysis and Security Engine (BASE) ...)
-	TODO: check
+	- acidbase <unfixed>
 CVE-2006-1504 (Multiple cross-site scripting (XSS) vulnerabilities in Arab Portal 2.0 ...)
-	TODO: check
+	NOT-FOR-US: Arab Portal
 CVE-2006-1503 (PHP remote file inclusion vulnerability in ...)
-	TODO: check
+	NOT-FOR-US: Virtual Wa
 CVE-2006-1502 (Multiple integer overflows in MPlayer 1.0pre7try2 allow remote ...)
-	TODO: check
+	NOT-FOR-US: MPlayer 
+	NOTE: I can't find the vulnerable code in xine-lib
 CVE-2006-1501 (SQL injection vulnerability in index.php in OneOrZero 1.6.3.0 allows ...)
-	TODO: check
+	NOT-FOR-US: OneOrZero
 CVE-2006-1500 (SQL injection vulnerability in index.php in Tilde CMS 3.0 allows ...)
-	TODO: check
+	NOT-FOR-US: Tilde CMS 3.0
 CVE-2006-1499 (SQL injection vulnerability in vCounter.php in vCounter 1.0 allows ...)
-	TODO: check
+	NOT-FOR-US: vCounter
 CVE-2006-1497 (Directory traversal vulnerability in index.php in ViHor Design allows ...)
-	TODO: check
+	NOT-FOR-US: ViHor Design
 CVE-2006-1496 (Multiple cross-site scripting (XSS) vulnerabilities in index.php in ...)
-	TODO: check
+	NOT-FOR-US: ViHor Design
 CVE-2006-1495 (SQL injection vulnerability in general/sendpassword.php in (1) ...)
-	TODO: check
+	NOT-FOR-US: PHPCollab / NetOffice
 CVE-2006-1494
 	RESERVED
 CVE-2006-1493 (Cross-site scripting (XSS) vulnerability in dir.php in Explorer XP ...)
-	TODO: check
+	NOT-FOR-US: Explorer XP
 CVE-2006-1492 (Directory traversal vulnerability in dir.php in Explorer XP allows ...)
-	TODO: check
+	NOT-FOR-US: Explorer XP
 CVE-2006-1489 (Multiple SQL injection vulnerabilities in FusionZONE CouponZONE ...)
-	TODO: check
+	NOT-FOR-US: FusionZONE CouponZONE
 CVE-2005-4748 (PHP remote file include vulnerability in functions_admin.php in ...)
-	TODO: check
-end claimed by jmm
+	NOT-FOR-US: Virtual War
 CVE-2006-XXXX [unixodbc rpath set to /home]
 	- unixodbc 2.2.11-11 (bug #358142; low)
 	[sarge] - unixodbc <not-affected> (rpath not set to /home in Sarge)