[Secure-testing-commits] r3660 - data/CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2006-03-22 09:19:31 +0000 (Wed, 22 Mar 2006)
New Revision: 3660

Modified:
   data/CVE/list
Log:
new firebird issue (fixed)
new flash issue (fixed)
netpanzer fixed
bugnums


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-03-22 09:14:30 UTC (rev 3659)
+++ data/CVE/list	2006-03-22 09:19:31 UTC (rev 3660)
@@ -1,3 +1,5 @@
+CVE-2006-2043 [firebird2 remote DoS]
+	- firebird2 1.5.3.4870-3 (bug #357580)
 CVE-2006-1341 (SQL injection vulnerability in events.php in Maian Events 1.0 allows ...)
 	TODO: check
 CVE-2006-1340 (CuteNews 1.4.1 and possibly other versions allows remote attackers to ...)
@@ -173,7 +175,7 @@
 CVE-2006-1252 (Eval injection vulnerability in cal.php in Light Weight Calendar (LWC) ...)
 	TODO: check
 CVE-2006-1251 (greylistclean.cron in sa-exim 4.2 allows remote attackers to delete ...)
-	- sa-exim <unfixed> (bug #345071)
+	- sa-exim <unfixed> (bug #345071; bug #356301)
 CVE-2006-1250 (Unspecified vulnerability in the Webmail module in Winmail before 4.3 ...)
 	TODO: check
 CVE-2006-1249 (** UNVERIFIABLE, PRERELEASE ** ...)
@@ -3173,7 +3175,7 @@
 	- snmptrapfmt 1.10
 CVE-2006-0049 (gpg in GnuPG before 1.4.2.2 does not properly verify non-detached ...)
 	{DSA-993-2}
-	- gnupg 1.4.2.2-1 (medium)
+	- gnupg 1.4.2.2-1 (bug #356125; medium)
 CVE-2006-0048
 	RESERVED
 CVE-2006-0047 (packets.c in Freeciv 2.0 before 2.0.8 allows remote attackers to cause ...)
@@ -4650,13 +4652,13 @@
 CVE-2006-0032
 	RESERVED
 CVE-2006-0031 (Stack-based buffer overflow in Microsoft Excel 2000, 2002, and 2003, ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2006-0030 (Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2006-0029 (Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2006-0028 (Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2006-0027
 	RESERVED
 CVE-2006-0026
@@ -4664,13 +4666,13 @@
 CVE-2006-0025
 	RESERVED
 CVE-2006-0024 (Multiple unspecified vulnerabilities in Adobe Flash Player 8.0.22.0 ...)
-	TODO: check
+	- flashplugin-nonfree 7.0.61-4 (bug #357038; bug #357105)
 CVE-2006-0023 (Microsoft Windows XP SP1 and SP2 before August 2004, and possibly ...)
 	NOT-FOR-US: Microsoft
 CVE-2006-0022
 	RESERVED
 CVE-2006-0021 (Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2006-0020 (An unspecified Microsoft WMF parsing application, as used in Internet ...)
 	NOT-FOR-US: Microsoft
 CVE-2006-0018
@@ -9910,7 +9912,7 @@
 CVE-2005-2296 (YabbSE 1.5.5c allows remote attackers to obtain sensitive information ...)
 	NOT-FOR-US: YabbSE
 CVE-2005-2295 (NetPanzer 0.8 and earlier allows remote attackers to cause a denial of ...)
-	- netpanzer <unfixed> (bug #318329; medium)
+	- netpanzer 0.8+svn20060319-1 (bug #318329; medium)
 CVE-2005-2294 (Oracle Forms 4.5, 6.0, 6i, and 9i on Unix, when a large number of ...)
 	NOT-FOR-US: Oracle
 CVE-2005-2293 (Oracle Formsbuilder 9.0.4 stores database usernames and passwords in a ...)