[Secure-testing-commits] r3482 - data/CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2006-02-14 23:10:22 +0000 (Tue, 14 Feb 2006)
New Revision: 3482

Modified:
   data/CVE/list
Log:
hcidump, gnutls
new mantis issues (sigh)
binutils not-affected


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-02-14 22:42:10 UTC (rev 3481)
+++ data/CVE/list	2006-02-14 23:10:22 UTC (rev 3482)
@@ -13,7 +13,7 @@
 CVE-2006-0671 (Buffer overflow in Sony Ericsson K600i, V600i, W800i, and T68i cell ...)
 	TODO: check
 CVE-2006-0670 (Buffer overflow in l2cap.c in hcidump 1.29 allows remote attackers to ...)
-	TODO: check
+	- bluez-hcidump <unfixed> (bug #351881)
 CVE-2006-0669 (Multiple SQL injection vulnerabilities in archive.asp in GA's Forum ...)
 	TODO: check
 CVE-2006-0668 (SQL injection vulnerability in index.php in PwsPHP 1.2.3 allows remote ...)
@@ -23,9 +23,11 @@
 CVE-2006-0666
 	RESERVED
 CVE-2006-0665 (Unspecified vulnerability in (1) query_store.php and (2) ...)
-	TODO: check
+	- mantis 0.19.4-3
+	[woody] - mantis <not-affected> (Complete rewrite in 0.19)
 CVE-2006-0664 (Cross-site scripting (XSS) vulnerability in config_defaults_inc.php in ...)
-	TODO: check
+	- mantis 0.19.4-3
+	[woody] - mantis <not-affected> (Complete rewrite in 0.19)
 CVE-2006-0663 (Multiple cross-site scripting (XSS) vulnerabilities in Lotus Domino ...)
 	TODO: check
 CVE-2006-0662 (Cross-site scripting (XSS) vulnerability in Lotus Domino iNotes Client ...)
@@ -61,9 +63,11 @@
 CVE-2006-0647 (LDAP service in Sun Java System Directory Server 5.2, running on Linux ...)
 	TODO: check
 CVE-2006-0646 (ld in SUSE Linux 9.1 through 10.0, and SLES 9, in certain ...)
-	TODO: check
+	- binutils <not-affected> (SuSE specific vulnerability)
 CVE-2006-0645 (Tiny ASN.1 Library (libtasn1) before 0.2.18, as used by (1) GnuTLS ...)
-	TODO: check
+	- libtasn1-2 <unfixed> (bug #352182)
+	- libtasn1-0 <unfixed> (bug #352188)
+	- gnutls <unfixed>
 CVE-2005-4715 (Multiple SQL injection vulnerabilities in modules.php in PHP-Nuke 7.8, ...)
 	TODO: check
 CVE-2005-4714 (Format string vulnerability in the vmps_log function in OpenVMPS (VLAN ...)
@@ -81,10 +85,6 @@
 	- dpkg-sig <unfixed> (bug #352723; medium)
 CVE-2006-XXXX [pyblosxom remote file disclosure]
 	- pyblosxom 1.3.2-1 (high)
-CVE-2006-XXXX [gnutls/tasn remote DoS]
-	- libtasn1-2 <unfixed> (bug #352182)
-	- libtasn1-0 <unfixed> (bug #352188)
-	- gnutls <unfixed>
 CVE-2006-XXXX [Wordpress XSS]
 	- wordpress 2.0.1-1 (bug #328909)
 CVE-2006-XXXX [pioneers meta-server DoS]
@@ -251,8 +251,6 @@
 	NOT-FOR-US: Outblaze
 CVE-2006-0567 (Directory traversal vulnerability in Files Xaraya module before 0.5.1, ...)
 	NOT-FOR-US: Xaraya
-CVE-2006-XXXX [bluez-hcidump DoS]
-	- bluez-hcidump <unfixed> (bug #351881)
 CVE-2006-0566 (The LDAP component in CommuniGate Pro Core Server 5.0.7 allows remote ...)
 	NOT-FOR-US: Communigate Pro
 CVE-2006-0565 (PHP remote file include vulnerability in inc/backend_settings.php in ...)