[Secure-testing-commits] r7259 - data/CVE

[joeyh at alioth.debian.org]

Author: joeyh
Date: 2007-11-09 21:14:09 +0000 (Fri, 09 Nov 2007)
New Revision: 7259

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-11-09 14:56:32 UTC (rev 7258)
+++ data/CVE/list	2007-11-09 21:14:09 UTC (rev 7259)
@@ -1,3 +1,43 @@
+CVE-2007-5900
+	RESERVED
+CVE-2007-5899
+	RESERVED
+CVE-2007-5898
+	RESERVED
+CVE-2007-5897 (Buffer overflow in MDSYS.SDO_CS in Oracle Database Server 8iR3, 9iR1, ...)
+	TODO: check
+CVE-2007-5896 (Mozilla Firefox 2.0.0.9 allows remote attackers to cause a denial of ...)
+	TODO: check
+CVE-2007-5895
+	RESERVED
+CVE-2007-5894
+	RESERVED
+CVE-2006-7224 (Multiple integer overflows in Perl-Compatible Regular Expression ...)
+	TODO: check
+CVE-2004-2748 (viewreport.pl in NetIQ WebTrends Reporting Center Enterprise Edition ...)
+	TODO: check
+CVE-2004-2747 (Directory traversal vulnerability in Pablo Software Solutions Quick 'n ...)
+	TODO: check
+CVE-2004-2746 (SQL injection vulnerability in adminlogin.asp in XTREME ASP Photo ...)
+	TODO: check
+CVE-2003-1536 (Multiple cross-site scripting (XSS) vulnerabilities in Codeworx ...)
+	TODO: check
+CVE-2003-1535 (Justice Guestbook 1.3 allows remote attackers to obtain the full ...)
+	TODO: check
+CVE-2003-1534 (Cross-site scripting (XSS) vulnerability in jgb.php3 in Justice ...)
+	TODO: check
+CVE-2003-1533 (SQL injection vulnerability in accesscontrol.php in PhpPass 2 allows ...)
+	TODO: check
+CVE-2003-1532 (SQL injection vulnerability in compte.php in PhpMyShop 1.00 allows ...)
+	TODO: check
+CVE-2003-1531 (Cross-site scripting (XSS) vulnerability in testcgi.exe in Lilikoi ...)
+	TODO: check
+CVE-2003-1530 (SQL injection vulnerability in privmsg.php in phpBB 2.0.3 and earlier ...)
+	TODO: check
+CVE-2003-1529 (Directory traversal vulnerability in Seagull Software Systems J Walk ...)
+	TODO: check
+CVE-2003-1528 (nsr_shutdown in Fujitsu Siemens NetWorker 6.0 allows local users to ...)
+	TODO: check
 CVE-2007-5893 (HTTPSocket.cpp in the C++ Sockets Library before 2.2.5 allows remote ...)
 	NOT-FOR-US: Sockets Library
 CVE-2007-5892 (Stack-based buffer overflow in the pdg2.dll ActiveX control in ...)
@@ -92,7 +132,7 @@
 	RESERVED
 CVE-2007-5847
 	RESERVED
-CVE-2007-5846 (The SNMP agent in net-snmp 5.4.1 and earlier allows remote attackers ...)
+CVE-2007-5846 (The SNMP agent (snmp_agent.c) in net-snmp before 5.4.1 allows remote ...)
 	- net-snmp 5.4.1~dfsg-1
 	NOTE: 5.4.1 already includes a fix by the upstream author
 CVE-2007-5845 (Directory traversal vulnerability in error.php in GuppY 4.6.3, 4.5.16, ...)
@@ -257,8 +297,8 @@
 	NOT-FOR-US: Globe7 soft phone client
 CVE-2007-5767 (Heap-based buffer overflow in the Client Trust application ...)
 	NOT-FOR-US: Geronimo Apache
-CVE-2007-5766
-	RESERVED
+CVE-2007-5766 (SQL injection vulnerability in okxLOV.jsp in Oracle E-Business Suite ...)
+	TODO: check
 CVE-2007-5765
 	RESERVED
 CVE-2007-5764
@@ -1154,6 +1194,7 @@
 CVE-2003-1401 (login.php in php-Board 1.0 stores plaintext passwords in $username.txt ...)
 	NOT-FOR-US: Data pre-dating the Security Tracker
 CVE-2007-5589 (Muliple cross-site scripting (XSS) vulnerabilities in phpMyAdmin ...)
+	{DSA-1403-1}
 	- phpmyadmin 4:2.11.1.2-1
 CVE-2007-5579 (login.php in Pligg CMS 9.5 uses a guessable confirmation code when ...)
 	NOT-FOR-US: Pligg CMS
@@ -1872,6 +1913,7 @@
 CVE-2007-5387 (PHP remote file inclusion vulnerability in ...)
 	NOT-FOR-US: Pindorama
 CVE-2007-5386 (Cross-site scripting (XSS) vulnerability in scripts/setup.php in ...)
+	{DSA-1403-1}
 	- phpmyadmin 4:2.11.1.2-1 (unimportant; bug #446451) 
 	[sarge] - phpmyadmin <not-affected> (vulnerable script not present)
 CVE-2007-5385 (Multiple cross-site scripting (XSS) vulnerabilities in the ...)
@@ -3738,6 +3780,7 @@
 CVE-2007-4651 (Unspecified vulnerability in Adobe Connect Enterprise Server 6 allows ...)
 	NOT-FOR-US: Adobe Connect Enterprise Server
 CVE-2007-4650 (Multiple unspecified vulnerabilities in Gallery before 2.2.3 allow ...)
+	{DSA-1404-1}
 	- gallery2 2.2.3-1
 	[etch] - gallery2 <unfixed> (bug #441407)
 	NOTE: does not affect gallery 1.x (package 'gallery')
@@ -4043,8 +4086,8 @@
 	RESERVED
 CVE-2007-4518
 	RESERVED
-CVE-2007-4517
-	RESERVED
+CVE-2007-4517 (Buffer overflow in the XDB.XDB_PITRIG_PKG.PITRIG_DROPMETADATA ...)
+	TODO: check
 CVE-2007-4516
 	RESERVED
 CVE-2007-4515 (Buffer overflow in a certain ActiveX control in YVerInfo.dll before ...)