[Secure-testing-commits] r4966 - data/CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2006-11-15 20:46:59 +0100 (Wed, 15 Nov 2006)
New Revision: 4966

Modified:
   data/CVE/list
Log:
multiple new chetcpasswd issues
trac CVEfied
one mozilla issue not-affected for sarge
remove xine-lib dupe
new pdns issues
bugnums


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-11-15 08:14:20 UTC (rev 4965)
+++ data/CVE/list	2006-11-15 19:46:59 UTC (rev 4966)
@@ -1,3 +1,7 @@
+CVE-2006-XXXX [chetcpasswd multiple vulnerabilities]
+	- chetcpasswd <unfixed> (bug #394454)
+	NOTE: I've filed a removal bug, this doesn't have a security perspective
+	NOTE: It's too buggy even for sid and was never part of stable or testing
 CVE-2006-5884 (Multiple unspecified vulnerabilities in DirectAnimation ActiveX ...)
 	TODO: check
 CVE-2006-5883 (Multiple cross-site scripting (XSS) vulnerabilities in cPanel 10 allow ...)
@@ -11,7 +15,7 @@
 CVE-2006-5879 (SQL injection vulnerability in default1.asp in ASPPortal 4.0.0 beta ...)
 	TODO: check
 CVE-2006-5878 (Cross-site Request Forgery (CSRF) vulnerability in Trac before 0.10.1 ...)
-	TODO: check
+	- trac 0.10.1-1 (bug #397683)
 CVE-2006-5877
 	RESERVED
 CVE-2006-5876
@@ -130,8 +134,6 @@
 	RESERVED
 CVE-2006-5864 (Stack-based buffer overflow in the ps_gettext function in ps.c for GNU ...)
 	- gv 1:3.6.2-2 (medium; bug #398292)
-CVE-2006-XXXX [track CSRF vulnerability]
-	- trac 0.10.1-1
 CVE-2006-5818 (Multiple buffer overflows in tunekrnl in IBM Lotus Domino 6.x before ...)
 	NOT-FOR-US: Lotus Domino 
 CVE-2006-5817 (prl_dhcpd in Parallels Desktop for Mac Build 1940 uses insecure ...)
@@ -291,7 +293,7 @@
 	- icedove <unfixed> (medium)
 	- mozilla <unfixed> (medium)
 	- xulrunner <unfixed> (high)
-	- mozilla-firefox <removed> (high)
+	[sarge] - mozilla-firefox <not-affected> (Vulnerable code not present)
 	- mozilla-thunderbird <removed> (medium)
 CVE-2006-5746 (The console in AirMagnet Enterprise does not properly validate the ...)
 	NOT-FOR-US: AirMagnet
@@ -882,7 +884,7 @@
 	- ruby1.8 <unfixed> (medium; bug #398457)
 	- ruby1.9 <unfixed> (medium)
 CVE-2006-5466 (Heap-based buffer overflow in the showQueryPackage function in librpm ...)
-	- rpm 4.4.1-11 (low)
+	- rpm 4.4.1-11 (low; bug #397076)
 	[sarge] - rpm <no-dsa> (You need to trust the RPMs you're installing)
 	NOTE: Only hypothetical, far-fetched attacks feasible
 CVE-2006-5465 (Buffer overflow in PHP before 5.2.0 allows remote attackers to execute ...)
@@ -2322,10 +2324,10 @@
 	NOT-FOR-US: Roxio Toast
 CVE-2006-4800 (Multiple buffer overflows in libavcodec in ffmpeg before ...)
 	- ffmpeg 0.cvs20060329-1
-	NOTE: fixed in sid+etch according to jmm
+	NOTE: according to the changelog, libxine (starting from 1.1.2-4) links dynamically against ffmpeg
 	TODO: check other packages embedding ffmpeg code
 CVE-2006-4799 (Buffer overflow in ffmpeg for xine-lib before 1.1.2 might allow ...)
-	- xine-lib 1.1.2-1
+	- xine-lib 1.1.2-1 (bug #369876; medium)
 	NOTE: according to the changelog, libxine (starting from 1.1.2-4) links dynamically against ffmpeg
 	TODO: check ffmpeg
 CVE-2006-4798 (SQL-Ledger before 2.4.4 stores a password in a query string, which ...)
@@ -3584,9 +3586,11 @@
 	NOTE: On Sarge this is only a DoS, not code injection
 	- thunderbird 1.5.0.7-1 (low)
 CVE-2006-4252 (PowerDNS Recursor 3.1.3 and earlier allows remote attackers to cause a ...)
-	TODO: check
+	- pdns-recursor 3.1.4-1 (bug #398559)
+	- pdns <not-affected> (Recursor module has been moved to pdns-recursor)
 CVE-2006-4251 (Buffer overflow in PowerDNS Recursor 3.1.3 and earlier might allow ...)
-	TODO: check
+	- pdns-recursor 3.1.4-1 (bug #398557; high)
+	- pdns <not-affected> (Recursor module has been moved to pdns-recursor)
 CVE-2006-4250
 	RESERVED
 CVE-2006-4249 [plone group creation privilege escalation]
@@ -7264,8 +7268,6 @@
 CVE-2006-2644 (AWStats 6.5, and possibly other versions, allows remote authenticated ...)
 	{DSA-1075-1}
 	- awstats 6.5-2 (bug #365910)
-CVE-2006-XXXX [libxine1 overflow via a specially-crafted AVI file]
-	- xine-lib 1.1.1-2 (bug #369876; medium)
 CVE-2006-XXXX [specialy crafted WAV turns mkvmerge into a malloc bomb]
 	- mkvtoolnix 1.7.0-2 (bug #370144; low)
 CVE-2006-XXXX ['Cache' shell injection vulnerability]
@@ -14068,7 +14070,7 @@
 CVE-2006-0041
 	RESERVED
 CVE-2006-0040 (GNOME Evolution 2.4.2.1 and earlier allows remote attackers to cause a ...)
-	- evolution <unfixed>
+	- evolution <unfixed> (bug #398064)
 	[sarge] - evolution <not-affected> (Not reproducable on Sarge)
 CVE-2006-0039 (Race condition in the do_add_counters function in netfilter for Linux ...)
 	{DSA-1103 DSA-1097-1}