[Secure-testing-commits] r3806 - data/CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2006-04-14 13:00:35 +0000 (Fri, 14 Apr 2006)
New Revision: 3806

Modified:
   data/CVE/list
Log:
new issues in amaya and mnogosearch
remove freeradius temp issue


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-04-14 12:43:27 UTC (rev 3805)
+++ data/CVE/list	2006-04-14 13:00:35 UTC (rev 3806)
@@ -1,3 +1,5 @@
+CVE-2006-XXXX [two amaya buffer overflows]
+	- amaya <unfixed> (bug #362575)
 CVE-2006-1789 (Directory traversal vulnerability in pajax_call_dispatcher.php in ...)
 	TODO: check
 CVE-2006-1788 (Adobe Document Server for Reader Extensions 6.0, during log on, ...)
@@ -33,7 +35,7 @@
 CVE-2006-1773 (SQL injection vulnerability in include.php in PHPKIT 1.6.1 Release 2 ...)
 	TODO: check
 CVE-2006-1772 (debconf in Debian GNU/Linux, when configuring mnogosearch in the ...)
-	TODO: check
+	- mnogosearch <unfixed> (bug #361775)
 CVE-2006-1771 (Directory traversal vulnerability in misc in pbcs.dll in SAXoTECH ...)
 	TODO: check
 CVE-2006-1770 (Multiple PHP remote file inclusion vulnerabilities in Azerbaijan ...)
@@ -8852,8 +8854,6 @@
 CVE-2005-2992 (arc 5.21j and earlier allows local users to overwrite arbitrary files ...)
 	{DSA-843-1}
 	- arc 5.21m-1 (low)
-CVE-2005-XXXX [freeradius buffer overflows and SQL injection]
-	- freeradius 1.0.5-1 (medium)
 CVE-2005-2990 (AuthInfo.java in LineContol Java Client (jlc) before 0.8.1 stores ...)
 	NOT-FOR-US: LineControl Java Client
 CVE-2005-2989 (Multiple SQL injection vulnerabilities in DeluxeBB 1.0 and 1.0.5 allow ...)