[Secure-testing-commits] r7080 - data/CVE

[joeyh at alioth.debian.org]

Author: joeyh
Date: 2007-10-23 21:14:10 +0000 (Tue, 23 Oct 2007)
New Revision: 7080

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-10-23 20:38:33 UTC (rev 7079)
+++ data/CVE/list	2007-10-23 21:14:10 UTC (rev 7080)
@@ -1,3 +1,69 @@
+CVE-2003-1461 (Buffer overflow in rwrite for HP-UX 11.0 could allow local users to ...)
+	TODO: check
+CVE-2003-1460 (Worker Filemanager 1.0 through 2.7 sets the permissions on the ...)
+	TODO: check
+CVE-2003-1459 (Multiple PHP remote file inclusion vulnerabilities in ttCMS 2.2 and ...)
+	TODO: check
+CVE-2003-1458 (SQL injection vulnerability in Profile.php in ttCMS 2.2 and ttForum ...)
+	TODO: check
+CVE-2003-1457 (Auerswald COMsuite CTI ControlCenter 3.1 creates a default ...)
+	TODO: check
+CVE-2003-1456 (Album.pl 6.1 allows remote attackers to execute arbitrary commands, ...)
+	TODO: check
+CVE-2003-1455 (Multiple buffer overflows in the launch_bcrelay function in pptpctrl.c ...)
+	TODO: check
+CVE-2003-1454 (Invision Power Services Invision Board 1.0 through 1.1.1, when a forum ...)
+	TODO: check
+CVE-2003-1453 (Cross-site scripting (XSS) vulnerability in the MytextSanitizer ...)
+	TODO: check
+CVE-2003-1452 (Untrusted search path vulnerability in Qualcomm qpopper 4.0 through ...)
+	TODO: check
+CVE-2003-1451 (Buffer overflow in Symantec Norton AntiVirus 2002 allows remote ...)
+	TODO: check
+CVE-2003-1450 (BitchX 75p3 and 1.0c16 through 1.0c20cvs allows remote attackers to ...)
+	TODO: check
+CVE-2003-1449 (Aladdin Knowlege Systems eSafe Gateway 3.5.126.0 does not check the ...)
+	TODO: check
+CVE-2003-1448 (Memory leak in the Windows 2000 kernel allows remote attackers to ...)
+	TODO: check
+CVE-2003-1447 (IBM WebSphere Advanced Server Edition 4.0.4 uses a weak encryption ...)
+	TODO: check
+CVE-2003-1446 (Buffer overflow in the save_into_file function in save.c for Rogue ...)
+	TODO: check
+CVE-2003-1445 (Stack-based buffer overflow in Far Manager 1.70beta1 and earlier ...)
+	TODO: check
+CVE-2003-1444 (Kaspersky Antivirus (KAV) 4.0.9.0 allows local users to cause a denial ...)
+	TODO: check
+CVE-2003-1443 (Kaspersky Antivirus (KAV) 4.0.9.0 does not detect viruses in files ...)
+	TODO: check
+CVE-2003-1442 (The web administration page for the Ericsson HM220dp ADSL modem does ...)
+	TODO: check
+CVE-2003-1441 (Posadis 0.50.4 through 0.50.8 allows remote attackers to cause a ...)
+	TODO: check
+CVE-2003-1440 (SpamProbe 0.8a allows remote attackers to cause a denial of service ...)
+	TODO: check
+CVE-2003-1439 (Secure Internet Live Conferencing (SILC) 0.9.11 and 0.9.12 stores ...)
+	TODO: check
+CVE-2003-1438 (Race condition in BEA WebLogic Server and Express 5.1 through 7.0.0.1, ...)
+	TODO: check
+CVE-2003-1437 (BEA WebLogic Express and WebLogic Server 7.0 and 7.0.0.1, stores ...)
+	TODO: check
+CVE-2003-1436 (PHP remote file inclusion vulnerability in nukebrowser.php in ...)
+	TODO: check
+CVE-2003-1435 (SQL injection vulnerability in PHP-Nuke 5.6 and 6.0 allows remote ...)
+	TODO: check
+CVE-2003-1434 (login_ldap 3.1 and 3.2 allows remote attackers to initiate ...)
+	TODO: check
+CVE-2003-1433 (Epic Games Unreal Engine 226f through 436 does not validate the ...)
+	TODO: check
+CVE-2003-1432 (Epic Games Unreal Engine 226f through 436 allows remote attackers to ...)
+	TODO: check
+CVE-2003-1431 (Buffer overflow in Epic Games Unreal Engine 226f through 436 allows ...)
+	TODO: check
+CVE-2003-1430 (Directory traversal vulnerability in Unreal Tournament Server 436 and ...)
+	TODO: check
+CVE-2003-1429 (Buffer overflow in Proxomitron Naoko 4.4 allows remote attackers to ...)
+	TODO: check
 CVE-2007-5622
 	RESERVED
 CVE-2007-5621 (Multiple cross-site scripting (XSS) vulnerabilities in the Token ...)
@@ -1410,7 +1476,7 @@
 CVE-2007-5192
 	RESERVED
 CVE-2007-5191 (mount and umount in util-linux call the setuid and setgid functions in ...)
-	{DTSA-64-1}
+	{DTSA-64-1 DTSA-70-1}
 	- util-linux 2.13-8 (low)
 	- loop-aes-utils 2.13-2 (low)
 CVE-2007-5190 (Multiple cross-site scripting (XSS) vulnerabilities in Alcatel ...)
@@ -2822,8 +2888,8 @@
 	RESERVED
 CVE-2007-4575
 	RESERVED
-CVE-2007-4574
-	RESERVED
+CVE-2007-4574 (Unspecified vulnerability in the stack unwinder fixes in Red Hat ...)
+	TODO: check
 CVE-2007-4573 (The IA32 system call emulation functionality in Linux kernel 2.4.x and ...)
 	{DSA-1381-2 DSA-1378-2 DSA-1378-1}
 	- linux-2.6 <unfixed> (medium)
@@ -4436,8 +4502,7 @@
 CVE-2007-3851 (The drm/i915 component in the Linux kernel before 2.6.22.2, when used ...)
 	{DSA-1356-1}
 	- linux-2.6 2.6.22-4
-CVE-2007-3850 [Kernel ppc64 DoS]
-	RESERVED
+CVE-2007-3850 (The eHCA driver in Linux kernel 2.6 before 2.6.22, when running on ...)
 	- linux-2.6 <not-affected> (Debian's kernel doesn't enable CONFIG_PPC_64K_PAGES)
 CVE-2007-3849 (Red Hat Enterprise Linux (RHEL) 5 ships the rpm for the Advanced ...)
 	NOT-FOR-US: RedHat Advanced Intrusion Detection Environment