[Secure-testing-commits] r5070 - data/CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2006-12-05 19:58:12 +0100 (Tue, 05 Dec 2006)
New Revision: 5070

Modified:
   data/CVE/list
Log:
serendipity unimportant
no-dsas and issues not affecting sarge
mozilla cleanup for sarge


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-12-05 16:42:02 UTC (rev 5069)
+++ data/CVE/list	2006-12-05 18:58:12 UTC (rev 5070)
@@ -72,7 +72,8 @@
 CVE-2006-6243 (Multiple SQL injection vulnerabilities in index.asp in FipsSHOP allow ...)
 	TODO: check
 CVE-2006-6242 (Multiple directory traversal vulnerabilities in Serendipity 1.0.3 and ...)
-	- serendipity <unfixed> (medium; bug #401614)
+	- serendipity 1.0.4-1 (unimportant; bug #401614)
+	NOTE: Only exploitable with register_globals
 CVE-2006-6241 (Sorin Chitu Telnet-FTP Server 1.0 allows remote authenticated users to ...)
 	TODO: check
 CVE-2006-6240 (Directory traversal vulnerability in Sorin Chitu Telnet-FTP Server 1.0 ...)
@@ -317,6 +318,7 @@
 	NOTE: PMASA-2006-7, PMASA-2006-8, PMASA-2006-9
 CVE-2006-XXXX [smb4k security issue]
 	- smb4k 0.7.5-1
+	[sarge] - smb4k <not-affected> (Vulnerable code not present)
 CVE-2006-XXXX [arbitrary code execution in metaInfo.php in torrentflux]
 	- torrentflux <unfixed> (bug #400582; medium)
 CVE-2006-6129 (Integer overflow in the fatfile_getarch2 in Apple Mac OS X allows ...)
@@ -1023,7 +1025,8 @@
 	- openssh 1:4.3p2-6 (unimportant)
 	NOTE: Not a direct vulnerability
 CVE-2006-5793 (The sPLT chunk handling code (png_set_sPLT function in pngset.c) in ...)
-	- libpng 1.2.13-0 (medium; bug #398706)
+	- libpng 1.2.13-0 (low; bug #398706)
+	[sarge] - libpng <no-dsa> (Minor issue)
 CVE-2006-XXXX [obexpushd arbitrary command execution]
 	- obexpushd 0.4+svn10-1 (bug #397297; medium)
 CVE-2006-XXXX [motion insecure tempfile creation]
@@ -1123,8 +1126,6 @@
 	- icedove 1.5.0.8-1 (medium)
 	- mozilla <unfixed> (high)
 	- xulrunner 1.8.0.8-1 (high)
-	- mozilla-firefox <removed> (high)
-	- mozilla-thunderbird <removed> (medium)
 CVE-2006-5747 (Unspecified vulnerability in Mozilla Firefox before 1.5.0.8, ...)
 	NOTE: MFSA-2006-65
 	- firefox <unfixed> (high)
@@ -1737,8 +1738,6 @@
 	- icedove 1.5.0.8-1 (low)
 	- mozilla <unfixed> (low)
 	- xulrunner 1.8.0.8-1 (low)
-	- mozilla-firefox <removed> (low)
-	- mozilla-thunderbird <removed> (low)
 CVE-2006-5463 (Unspecified vulnerability in Mozilla Firefox before 1.5.0.8, ...)
 	{DSA-1227-1 DSA-1225-1 DSA-1224-1}
 	NOTE: MFSA-2006-67
@@ -1746,8 +1745,6 @@
 	- icedove 1.5.0.8-1 (medium)
 	- mozilla <unfixed> (high)
 	- xulrunner 1.8.0.8-1 (high)
-	- mozilla-firefox <removed> (high)
-	- mozilla-thunderbird <removed> (medium)
 CVE-2006-5462 (Mozilla Network Security Service (NSS) library before 3.11.3, as used ...)
 	{DSA-1227-1 DSA-1225-1 DSA-1224-1}
 	NOTE: MFSA-2006-66
@@ -1757,7 +1754,6 @@
 	- icedove 1.5.0.8-1 (medium)
 	- mozilla <unfixed> (high)
 	- xulrunner 1.8.0.8-1 (high)
-	- mozilla-thunderbird <removed> (medium)
 CVE-2006-5461 (Avahi before 0.6.15 does not verify the sender identity of netlink ...)
 	- avahi 0.6.15-1 (low)
 CVE-2006-XXXX [diffmon information leakage]