[Secure-testing-commits] r4933 - data/CVE

[Joey Hess]

Author: joeyh
Date: 2006-11-08 09:14:25 +0100 (Wed, 08 Nov 2006)
New Revision: 4933

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-11-07 20:49:03 UTC (rev 4932)
+++ data/CVE/list	2006-11-08 08:14:25 UTC (rev 4933)
@@ -1,3 +1,31 @@
+CVE-2006-5792 (Unspecified vulnerability in XLink Omni-NFS Enterprise allows remote ...)
+	TODO: check
+CVE-2006-5791 (Multiple cross-site scripting (XSS) vulnerabilities in elogd.c in ELOG ...)
+	TODO: check
+CVE-2006-5790 (Multiple format string vulnerabilities in elogd.c in ELOG 2.6.2 and ...)
+	TODO: check
+CVE-2006-5789 (WarFTPd 1.82.00-RC11 allows remote authenticated users to cause a ...)
+	TODO: check
+CVE-2006-5788 (PHP remote file inclusion vulnerability in (1) index.php and (2) ...)
+	TODO: check
+CVE-2006-5787 (admin/index.php in IPrimal Forums as of 20061105 allows remote ...)
+	TODO: check
+CVE-2006-5786 (Directory traversal vulnerability in class2.php in e107 0.7.5 and ...)
+	TODO: check
+CVE-2006-5785 (Unspecified vulnerability in SAP Web Application Server 6.40 before ...)
+	TODO: check
+CVE-2006-5784 (Unspecified vulnerability in SAP Web Application Server 6.40 before ...)
+	TODO: check
+CVE-2006-5783 (** DISPUTED ** ...)
+	TODO: check
+CVE-2006-5782
+	RESERVED
+CVE-2006-5781 (Stack-based buffer overflow in the handshake function in iodine 0.3.2 ...)
+	TODO: check
+CVE-2006-5780 (Stack-based buffer overflow in nfsd.exe in XLink Omni-NFS Server 5.2 ...)
+	TODO: check
+CVE-2006-5779 (Unspecified vulnerability in the openldap-2.2.29-1 package of OpenLDAP ...)
+	TODO: check
 CVE-2006-5777 (Creasito E-Commerce Content Manager 1.3.08 allows remote attackers to ...)
 	TODO: check
 CVE-2006-5776 (** DISPUTED ** ...)
@@ -248,10 +276,10 @@
 	TODO: check
 CVE-2006-5652 (Cross-site scripting (XSS) vulnerability in Sun iPlanet Messaging ...)
 	TODO: check
-CVE-2006-5651
-	RESERVED
-CVE-2006-5650
-	RESERVED
+CVE-2006-5651 (list.php in DigiOz Guestbook before 1.7.1 allows remote attackers to ...)
+	TODO: check
+CVE-2006-5650 (The ICQPhone.SipxPhoneManager ActiveX control in America Online ICQ ...)
+	TODO: check
 CVE-2006-XXXX [phpmyadmin XSS (PMASA-2006-6)]
 	- phpmyadmin 4:2.9.0.3-1 (low; bug #396638)
 	[sarge]	- phpmyadmin <not-affected> (Vulnerable code not present)
@@ -2068,7 +2096,7 @@
 	NOT-FOR-US: TualBLOG
 CVE-2004-2665 (Unspecified vulnerability in the Address and Routing Parameter Area ...)
 	NOT-FOR-US: HP-UX
-CVE-2006-5778 [linux-ftpd allows chdir to disallowed directories]
+CVE-2006-5778 (ftpd in linux-ftpd 0.17, and possibly other versions, performs a chdir ...)
 	- linux-ftpd 0.17-22 (low; bug #384454)
 CVE-2006-XXXX [ejabberd HTML code injection]
 	- ejabberd 1.1.1-8
@@ -7476,7 +7504,7 @@
 	NOT-FOR-US: IBM
 CVE-2006-2432 (IBM WebSphere Application Server 5.0.2 (or any earlier cumulative fix) ...)
 	NOT-FOR-US: IBM
-CVE-2006-2431 (Unspecified vulnerability in IBM WebSphere Application Server 5.0.2 ...)
+CVE-2006-2431 (Cross-site scripting (XSS) vulnerability in the 500 Internal Server ...)
 	NOT-FOR-US: IBM
 CVE-2006-2430 (IBM WebSphere Application Server 5.0.2 and earlier, 5.1.1 and earlier, ...)
 	NOT-FOR-US: IBM
@@ -7938,7 +7966,7 @@
 	NOT-FOR-US: Web-Agora
 CVE-2006-2227 (Cross-site scripting (XSS) vulnerability in misc.php in PunBB 1.2.11 ...)
 	NOT-FOR-US: PunBB
-CVE-2006-2226 (Buffer overflow in XM Easy Personal FTP Server 4.2 allows remote ...)
+CVE-2006-2226 (Buffer overflow in XM Easy Personal FTP Server 4.2 and 5.0.1 allows ...)
 	NOT-FOR-US: Easy Personal FTP Server
 CVE-2006-2225 (Buffer overflow in XM Easy Personal FTP Server 4.3 and earlier allows ...)
 	NOT-FOR-US: Easy Personal FTP Server