[Secure-testing-commits] r7594 - data/CVE

[joeyh at alioth.debian.org]

Author: joeyh
Date: 2007-12-11 21:14:14 +0000 (Tue, 11 Dec 2007)
New Revision: 7594

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-12-11 19:13:44 UTC (rev 7593)
+++ data/CVE/list	2007-12-11 21:14:14 UTC (rev 7594)
@@ -1,10 +1,54 @@
-CVE-2007-6304 [potential DoS by remote MySQL servers via a response that lacks the minimum required number of columns]
+CVE-2007-6305 (Multiple unspecified vulnerabilities in IBM Hardware Management ...)
+	TODO: check
+CVE-2007-6302 (Unspecified vulnerability in Novell NetMail 3.5.2 before Messaging ...)
+	TODO: check
+CVE-2007-6301 (Cross-site scripting (XSS) vulnerability in compose.php in ...)
+	TODO: check
+CVE-2007-6300 (Cross-site request forgery (CSRF) vulnerability in Fusion News 3.9.0 ...)
+	TODO: check
+CVE-2007-6298 (Cross-site scripting (XSS) vulnerability in the Shoutbox module for ...)
+	TODO: check
+CVE-2007-6297 (Multiple cross-site scripting (XSS) vulnerabilities in PHPMyChat ...)
+	TODO: check
+CVE-2007-6296 (PHP remote file inclusion vulnerability in users_popupL.php3 in ...)
+	TODO: check
+CVE-2007-6295 (Cross-site scripting (XSS) vulnerability in the WebRunMenuFrame page ...)
+	TODO: check
+CVE-2007-6294 (Multiple unspecified vulnerabilities in IBM Hardware Management ...)
+	TODO: check
+CVE-2007-6293 (Multiple unspecified vulnerabilities in IBM Hardware Management ...)
+	TODO: check
+CVE-2007-6292 (SQL injection vulnerability in leggi_commenti.asp in MWOpen 1.4 and ...)
+	TODO: check
+CVE-2007-6291 (SQL injection vulnerability in abm.aspx in Xigla Absolute Banner ...)
+	TODO: check
+CVE-2007-6290 (Multiple directory traversal vulnerabilities in js/get_js.php in ...)
+	TODO: check
+CVE-2007-6289 (Multiple PHP remote file inclusion vulnerabilities in SerWeb 2.0.0 ...)
+	TODO: check
+CVE-2007-6288 (Multiple SQL injection vulnerabilities in TCExam before 5.1.000 allow ...)
+	TODO: check
+CVE-2007-6287 (Cross-site scripting (XSS) vulnerability in the login page in Lxlabs ...)
+	TODO: check
+CVE-2007-6286
+	RESERVED
+CVE-2007-6285
+	RESERVED
+CVE-2007-6284
+	RESERVED
+CVE-2007-6283
+	RESERVED
+CVE-2007-6282
+	RESERVED
+CVE-2007-6281
+	RESERVED
+CVE-2007-6304 (The federated engine in MySQL 5.0.x before 5.0.52, 5.1.x before ...)
 	- mysql-dfsg-5.0 <unfixed> (low; bug #455737)
 	TODO: check mysql4
-CVE-2007-6303 [remote authenticated users can gain privileges via a sequence of statements]
+CVE-2007-6303 (MySQL 5.0.x before 5.0.52, 5.1.x before 5.1.23, and 6.0.x before 6.0.4 ...)
 	- mysql-dfsg-5.0 <unfixed> (low; bug #455737)
 	TODO: check mysql4
-CVE-2007-6299 [SQL injection in Drupal when certain contributed modules are enabled]
+CVE-2007-6299 (Multiple SQL injection vulnerabilities in Drupal and vbDrupal 4.7.x ...)
 	- drupal5 5.5-1
 	- drupal 4.7.10-1
 CVE-2007-XXXX [Roundcube webmail does not sanitize javascript expression calls in stylesheets]
@@ -744,15 +788,12 @@
 	NOTE: potential attackers must have privileges to store the krb5kdc master key
 CVE-2007-5971 (Double-free vulnerability in the gss_krb5int_make_seal_token_v3 ...)
 	- krb5 <unfixed> (bug #454974)
-CVE-2007-5970
-	RESERVED
+CVE-2007-5970 (MySQL 5.1.x before 5.1.23 and 6.0.x before 6.0.4 allows remote ...)
 	- mysql-dfsg-5.0 <unfixed>
-CVE-2007-5969
-	RESERVED
+CVE-2007-5969 (MySQL Community Server before 5.0.51, when a table relies on symlinks ...)
 	- mysql-dfsg-5.0 5.0.45-4 (low; bug #455010)
 	TODO: check mysql 4
-CVE-2007-5968
-	RESERVED
+CVE-2007-5968 (MySQL 5.1.x before 5.1.23 might allow attackers to gain privileges via ...)
 	- mysql-dfsg-5.0 <unfixed> (bug #455737)
 CVE-2007-5967
 	RESERVED
@@ -937,6 +978,7 @@
 CVE-2007-5905 (Adobe ColdFusion 8 and MX 7 allows remote attackers to hijack sessions ...)
 	NOT-FOR-US: Adobe ColdFusion
 CVE-2007-5904 (Multiple buffer overflows in CIFS VFS in Linux kernel 2.6.23 and ...)
+	{DSA-1428-1}
 	- linux-2.6 <unfixed>
 CVE-2007-5903
 	RESERVED
@@ -2487,6 +2529,7 @@
 	[etch] - linux-2.6 <not-affected> (Vulnerable code was introduced in 2.6.21)
 	NOTE: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=96a2d41a3e495734b63bff4e5dd0112741b93b38
 CVE-2007-5500 (The wait_task_stopped function in the Linux kernel before 2.6.23.8 ...)
+	{DSA-1428-1}
 	- linux-2.6 2.6.23-1
 	NOTE: kernel-sec is already tracking this
 CVE-2007-5499
@@ -3946,6 +3989,7 @@
 CVE-2007-4998
 	RESERVED
 CVE-2007-4997 (Integer underflow in the ieee80211_rx function in ...)
+	{DSA-1428-1}
 	- linux-2.6 <unfixed>
 CVE-2007-4996 (libpurple in Pidgin before 2.2.1 does not properly handle MSN nudge ...)
 	- pidgin 2.2.1-1 (medium)
@@ -8469,6 +8513,7 @@
 	{DSA-1363-1}
 	- linux-2.6 2.6.22-4
 CVE-2007-3104 (The sysfs_readdir function in the Linux kernel 2.6, as used in Red Hat ...)
+	{DSA-1428-1}
 	- linux-2.6 2.6.22-4 (low)
 CVE-2007-3103 (The init.d script for the X.Org X11 xfs font server on various Linux ...)
 	{DSA-1342-1}