[Secure-testing-commits] r5555 - data/CVE

[Kees Cook]

Author: keescook-guest
Date: 2007-03-16 18:00:00 +0000 (Fri, 16 Mar 2007)
New Revision: 5555

Modified:
   data/CVE/list
Log:
NFUs: 12
unfixed: kdelibs ktorrent trac
fixed: mplayer xine-lib
not-affected: php5 snort


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-03-16 17:57:00 UTC (rev 5554)
+++ data/CVE/list	2007-03-16 18:00:00 UTC (rev 5555)
@@ -52,6 +52,8 @@
 	TODO: check
 CVE-2007-1411 (Buffer overflow in PHP 4.4.6 and earlier, and unspecified PHP 5 ...)
 	TODO: check
+	NOTE: Haven't been able to reproduce the issue in either php4 or php5
+	NOTE: code inspection should be the next step.
 CVE-2007-1410 (SQL injection vulnerability in kategori.asp in GaziYapBoz Game Portal ...)
 	NOT-FOR-US: GaziYapBoz Game Portal
 CVE-2007-1409 (WordPress allows remote attackers to obtain sensitive information via ...)
@@ -61,13 +63,13 @@
 CVE-2007-1407 (Unspecified vulnerability in OpenSolution Quick.Cart before 2.1 has ...)
 	NOT-FOR-US: Quick.Cart
 CVE-2007-1406 (Trac before 0.10.3.1 does not send a Content-Disposition HTTP header ...)
-	TODO: check
+	- trac <unfixed> (low)
 CVE-2007-1405 (Cross-site scripting (XSS) vulnerability in the &quot;download wiki page as ...)
-	TODO: check
+	- trac <unfixed> (low)
 CVE-2007-1404 (tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 allows remote ...)
 	NOT-FOR-US: ProSysInfo TFTP Server
 CVE-2007-1403 (Multiple stack-based buffer overflows in an ActiveX control in ...)
-	TODO: check
+	NOT-FOR-US: ActiveX control
 CVE-2007-1402 (The Rediff Toolbar 2.0 ActiveX control in redifftoolbar.dll allows ...)
 	NOT-FOR-US: Rediff Toolbar ActiveX control
 CVE-2007-1401 (Buffer overflow in the crack extension (CrackLib), as bundled with PHP ...)
@@ -75,9 +77,9 @@
 CVE-2007-1400 (Plash permits sandboxed processes to open /dev/tty, which allows local ...)
 	NOT-FOR-US: Plash
 CVE-2007-1399 (Stack-based buffer overflow in the zip:// URL wrapper in PECL ZIP ...)
-	TODO: check
+	- php5 <not-affected> (Vulnerable code not present)
 CVE-2007-1398 (The frag3 preprocessor in Snort 2.6.1.1, 2.6.1.2, and 2.7.0 beta, when ...)
-	TODO: check
+	- snort <not-affected> (Vulnerable code not present)
 CVE-2007-1397 (Multiple stack-based buffer overflows in the (1) ExtractRnick and (2) ...)
 	NOT-FOR-US: FiSH IRC Encryption
 CVE-2007-1396 (The import_request_variables function in PHP 4.0.7 through 5.2.1, when ...)
@@ -99,17 +101,18 @@
 CVE-2007-1388 (The do_ipv6_setsockopt function in net/ipv6/ipv6_sockglue.c in Linux ...)
 	- linux-2.6 <unfixed>
 CVE-2007-1387 (The DirectShow loader (loader/dshow/DS_VideoDecoder.c) in MPlayer ...)
-	TODO: check
+	- mplayer 1.0~rc1-13 (bug #414075; medium)
+	- xine-lib 1.1.2+dfsg-3 (bug #414072; medium)
 CVE-2007-1386
 	RESERVED
 CVE-2007-1385 (chunkcounter.cpp in KTorrent before 2.1.2 allows remote attackers to ...)
-	TODO: check
+	- ktorrent <unfixed> (medium)
 CVE-2007-1384 (Directory traversal vulnerability in torrent.cpp in KTorrent before ...)
-	TODO: check
+	- ktorrent <unfixed> (medium)
 CVE-2007-1383 (Integer overflow in the 16 bit variable reference counter in PHP 4 ...)
 	TODO: check
 CVE-2007-1382 (The PHP COM extensions for PHP on Windows systems allow ...)
-	TODO: check
+	NOT-FOR-US: Windows PHP COM extensions
 CVE-2007-1381 (The wddx_deserialize function in wddx.c in PHP CVS as of 20070304 ...)
 	TODO: check
 CVE-2007-1380 (The php_binary serialization handler in the session extension in PHP ...)
@@ -179,7 +182,7 @@
 CVE-2007-1348
 	RESERVED
 CVE-2007-1347 (Microsoft Windows Explorer on Windows 2000 SP4 FR and XP SP2 FR, and ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Windows Explorer
 CVE-2007-1346 (Unspecified vulnerability in ipmitool for Sun Fire X2100M2 and X2200M2 ...)
 	NOT-FOR-US: Sun Fire Server
 CVE-2007-1345 (Unspecified vulnerability in cube.exe in the GINA component for CA ...)
@@ -257,7 +260,8 @@
 CVE-2007-1309 (Novell Access Management 3 SSLVPN Server allows remote authenticated ...)
 	NOT-FOR-US: Novell Access Management
 CVE-2007-1308 (ecma/kjs_html.cpp in KDE JavaScript (KJS), as used in Konqueror in KDE ...)
-	TODO: check
+	- kdelibs <unfixed> (low)
+	NOTE: this is a straight crash, I'm not sure it should even be considered "low"
 CVE-2007-1307 (Unspecified vulnerability in Lenovo Intel PRO/1000 LAN adapter before ...)
 	NOT-FOR-US: Microsoft Windows Driver for Intel PRO/1000 LAN
 CVE-2007-1306 (Unspecified vulnerability in Asterisk 1.4 before 1.4.1 and 1.2 before ...)
@@ -285,7 +289,7 @@
 CVE-2007-1295 (SQL injection vulnerability in topic_title.php in AJ Forum 1.0 allows ...)
 	NOT-FOR-US: AJ Forum
 CVE-2007-1294 (A certain ActiveX control in the DivXBrowserPlugin (npdivx32.dll) in ...)
-	TODO: check
+	NOT-FOR-US: DivXBrowserPlugin ActiveX control
 CVE-2007-1293 (SQL injection vulnerability in Rigter Portal System (RPS) 6.2, when ...)
 	NOT-FOR-US: Rigter Portal System
 CVE-2007-1292 (SQL injection vulnerability in inlinemod.php in Jelsoft vBulletin ...)
@@ -2022,17 +2026,17 @@
 CVE-2007-0734
 	RESERVED
 CVE-2007-0733 (Unspecified vulnerability in ImageIO in Apple Mac OS X 10.3.9 and 10.4 ...)
-	TODO: check
+	NOT-FOR-US: Apple Mac ImageIO
 CVE-2007-0732
 	RESERVED
 CVE-2007-0731 (Stack-based buffer overflow in the Apple-specific Samba module (SMB ...)
-	TODO: check
+	NOT-FOR-US: Apple Mac
 CVE-2007-0730 (Server Manager (servermgrd) in Apple Mac OS X 10.3.9 and 10.4 through ...)
-	TODO: check
+	NOT-FOR-US: Apple Mac Server Manager
 CVE-2007-0729
 	RESERVED
 CVE-2007-0728 (Unspecified vulnerability in Apple Mac OS X 10.3.9 and 10.4 through ...)
-	TODO: check
+	NOT-FOR-US: Apple Mac
 CVE-2007-0727
 	RESERVED
 CVE-2007-0726 (The SSH key generation process in OpenSSH in Apple Mac OS X 10.3.9 and ...)
@@ -2040,17 +2044,17 @@
 CVE-2007-0725
 	RESERVED
 CVE-2007-0724 (The IOKit HID interface in Apple Mac OS X 10.3.9 and 10.4 through ...)
-	TODO: check
+	NOT-FOR-US: Apple Mac
 CVE-2007-0723 (Unspecified vulnerability in the authentication feature for ...)
 	TODO: check
 CVE-2007-0722 (Integer overflow in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 ...)
-	TODO: check
+	NOT-FOR-US: Apple Mac
 CVE-2007-0721 (Unspecified vulnerability in diskimages-helper in Apple Mac OS X ...)
-	TODO: check
+	NOT-FOR-US: Apple Mac
 CVE-2007-0720 (The CUPS service in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 ...)
 	TODO: check
 CVE-2007-0719 (Stack-based buffer overflow in Apple Mac OS X 10.3.9 and 10.4 through ...)
-	TODO: check
+	NOT-FOR-US: Apple Mac
 CVE-2007-0718 (Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows ...)
 	NOT-FOR-US: Apple QuickTime
 CVE-2007-0717 (Integer overflow in Apple QuickTime before 7.1.5 allows remote ...)