[Secure-testing-commits] r5478 - data/CVE

[Stefan Fritsch]

Author: stef-guest
Date: 2007-02-21 23:20:11 +0100 (Wed, 21 Feb 2007)
New Revision: 5478

Modified:
   data/CVE/list
Log:
- CVE-2007-089[789]: new clamav issues fixed
- CVE-2007-0772: new linux issue fixed
- CVE-2007-1049: new wordpress issue fixed (low)
- new mediawiki issue fixed (low)
- iceweasel fixed


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-02-21 20:14:13 UTC (rev 5477)
+++ data/CVE/list	2007-02-21 22:20:11 UTC (rev 5478)
@@ -1,3 +1,7 @@
+CVE-2007-XXXX [MediaWiki XSS based on Microsoft Internet Explorer's UTF-7 charset autodetection]
+	- mediawiki1.7 1.7.1-9 (low)
+CVE-2007-1049 [wordpress security issue related to code used to prevent XSS]
+	- wordpress 2.1.1-1 (low)
 CVE-2007-1070 (Multiple stack-based buffer overflows in Trend Micro ServerProtect for ...)
 	TODO: check
 CVE-2007-1036 (The default configuration of JBoss does not restrict access to the (1) ...)
@@ -115,7 +119,7 @@
 	- asterisk-chan-capi <unfixed> (bug #411293)
 	- linux-2.6 <unfixed> (bug #411294)
 CVE-2007-0981 (Mozilla based browsers, including Firefox, allow remote attackers to ...)
-	- iceweasel <unfixed> (bug #411192; high)
+	- iceweasel 2.0.0.1+dfsg-3 (bug #411192; high)
 	- xulrunner <unfixed> (high)
 	- iceape <unfixed> (high)
 	- icedove <unfixed>
@@ -342,12 +346,13 @@
 	NOTE: this is a version information disclosure.
 CVE-2007-0900 (Multiple PHP remote file inclusion vulnerabilities in TagIt! Tagboard ...)
 	NOT-FOR-US: TagIt! Tagboard
-CVE-2007-0899
+CVE-2007-0899 [Possible heap overflow in libclamav/fsg.c]
 	RESERVED
+	- clamav 0.90-1
 CVE-2007-0898 (Directory traversal vulnerability in clamd in Clam AntiVirus ClamAV before ...)
-	TODO: check
+	- clamav 0.90-1
 CVE-2007-0897 (Clam AntiVirus ClamAV before 0.90 does not close open file descriptors under ...)
-	TODO: check
+	- clamav 0.90-1
 CVE-2007-0896 (Cross-site scripting (XSS) vulnerability in the (1) Sage before ...)
 	- firefox-sage 1.3.10-1
 CVE-2007-0451 (Unspecified vulnerability in Apache SpamAssassin before 3.1.8 allows remote ...)
@@ -681,7 +686,7 @@
 CVE-2007-0773
 	RESERVED
 CVE-2007-0772 (The Linux kernel before 2.6.20.1 allows remote attackers to cause a ...)
-	TODO: check
+	- linux-2.6 2.6.18.dfsg.1-11
 CVE-2007-0771
 	RESERVED
 CVE-2007-0770 (Buffer overflow in GraphicsMagick and ImageMagick allows user-assisted ...)