[Secure-testing-commits] r6685 - data/CVE

joeyh at alioth.debian.org joeyh at alioth.debian.org
Mon Sep 24 21:14:08 UTC 2007 

Author: joeyh
Date: 2007-09-24 21:14:07 +0000 (Mon, 24 Sep 2007)
New Revision: 6685

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-09-24 19:34:35 UTC (rev 6684)
+++ data/CVE/list	2007-09-24 21:14:07 UTC (rev 6685)
@@ -1,3 +1,87 @@
+CVE-2007-5052 (Multiple cross-site scripting (XSS) vulnerabilities in index.php in ...)
+	TODO: check
+CVE-2007-5051 (Multiple cross-site scripting (XSS) vulnerabilities in PhpGedView ...)
+	TODO: check
+CVE-2007-5050 (Directory traversal vulnerability in index.php in Neuron News 1.0 ...)
+	TODO: check
+CVE-2007-5049 (Stack-based buffer overflow in the StreamPredictor::getNextLine ...)
+	TODO: check
+CVE-2007-5048 (Heap-based buffer overflow in Lhaplus before 1.55 allows remote ...)
+	TODO: check
+CVE-2007-5047 (Norton Internet Security 2008 15.0.0.60 does not properly validate ...)
+	TODO: check
+CVE-2007-5046 (Cross-site scripting (XSS) vulnerability in the Webmail interface for ...)
+	TODO: check
+CVE-2007-5045 (Argument injection vulnerability in Apple QuickTime 7.1.5 and earlier, ...)
+	TODO: check
+CVE-2007-5044 (ZoneAlarm Pro 7.0.362.000 does not properly validate certain ...)
+	TODO: check
+CVE-2007-5043 (Kaspersky Internet Security 7.0.0.125 does not properly validate ...)
+	TODO: check
+CVE-2007-5042 (Outpost Firewall Pro 4.0.1025.7828 does not properly validate certain ...)
+	TODO: check
+CVE-2007-5041 (G DATA InternetSecurity 2007 does not properly validate certain ...)
+	TODO: check
+CVE-2007-5040 (Ghost Security Suite alpha 1.200 does not properly validate certain ...)
+	TODO: check
+CVE-2007-5039 (Ghost Security Suite beta 1.110 does not properly validate certain ...)
+	TODO: check
+CVE-2007-5038 (The offer_account_by_email function in User.pm in the WebService for ...)
+	TODO: check
+CVE-2007-5037 (Buffer overflow in the inotifytools_snprintf function in ...)
+	TODO: check
+CVE-2007-5036 (Multiple buffer overflows in the AirDefense Airsensor M520 with ...)
+	TODO: check
+CVE-2007-5035 (** DISPUTED ** ...)
+	TODO: check
+CVE-2007-5034 (ELinks before 0.11.3, when sending a POST request for an https URL, ...)
+	TODO: check
+CVE-2007-5033 (Cross-site scripting (XSS) vulnerability in profile.php in phpBB XS 2 ...)
+	TODO: check
+CVE-2007-5032 (Cross-site request forgery (CSRF) vulnerability in admin.php in ...)
+	TODO: check
+CVE-2007-5031 (The TSrvOptIA_NA::rebind method in SrvOptions/SrvOptIA_NA.cpp in ...)
+	TODO: check
+CVE-2007-5030 (Multiple integer overflows in Dibbler 0.6.0 allow remote attackers to ...)
+	TODO: check
+CVE-2007-5029 (Dibbler 0.6.0 does not verify that certain length parameters are ...)
+	TODO: check
+CVE-2007-5028 (Dibbler 0.6.0 on Linux uses weak world-writable permissions for ...)
+	TODO: check
+CVE-2007-5027 (Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/ddns in ...)
+	TODO: check
+CVE-2007-5026 (dBlog CMS, probably 2.0, stores sensitive information under the web ...)
+	TODO: check
+CVE-2007-5025 (Unspecified vulnerability in EMC VMware ACE before 1.0.3 Build 54075 ...)
+	TODO: check
+CVE-2007-5024 (EMC VMware Server before 1.0.4 Build 56528 writes passwords in ...)
+	TODO: check
+CVE-2007-5023 (Unquoted Windows search path vulnerability in EMC VMware Workstation ...)
+	TODO: check
+CVE-2007-5022 (Unspecified vulnerability in certain IBM Tivoli Storage Manager (TSM) ...)
+	TODO: check
+CVE-2007-5021 (Buffer overflow in the Client Acceptor Daemon (CAD) in certain IBM ...)
+	TODO: check
+CVE-2007-5020 (Unspecified vulnerability in Adobe Acrobat and Reader 8.1 on Windows ...)
+	TODO: check
+CVE-2004-2687 (distcc 2.x, as used in XCode 1.5 and others, when not configured to ...)
+	TODO: check
+CVE-2004-2686 (Directory traversal vulnerability in the vfs_getvfssw function in ...)
+	TODO: check
+CVE-2003-1339 (Stack-based buffer overflow in eZnet.exe, as used in eZ (a) ...)
+	TODO: check
+CVE-2003-1338 (CRLF injection vulnerability in Aprelium Abyss Web Server 1.1.2 and ...)
+	TODO: check
+CVE-2003-1337 (Heap-based buffer overflow in Aprelium Abyss Web Server 1.1.2 and ...)
+	TODO: check
+CVE-2003-1336 (Buffer overflow in mIRC before 6.11 allows remote attackers to execute ...)
+	TODO: check
+CVE-2002-2226 (Buffer overflow in tftpd of TFTP32 2.21 and earlier allows remote ...)
+	TODO: check
+CVE-2001-1583 (lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers ...)
+	TODO: check
+CVE-2001-1582 (Buffer overflow in the LDAP naming services library (libsldap) in Sun ...)
+	TODO: check
 CVE-2007-XXXX [mimep insecure tempfile usage and insecure calls to LaTeX and dvips]
 	- mp 3.7.1-8
 CVE-2007-5019 (Buffer overflow in the Sun Java Web Start ActiveX control in Java ...)
@@ -58,8 +142,8 @@
 	RESERVED
 CVE-2007-4992
 	RESERVED
-CVE-2007-4991
-	RESERVED
+CVE-2007-4991 (The SOCKS4 Proxy in Microsoft Internet Security and Acceleration (ISA) ...)
+	TODO: check
 CVE-2007-4990
 	RESERVED
 CVE-2007-4989
@@ -1007,8 +1091,7 @@
 	RESERVED
 CVE-2007-4570
 	RESERVED
-CVE-2007-4569 [unauthorized login problem in kdm]
-	RESERVED
+CVE-2007-4569 (backend/session.c in KDM in KDE 3.3.0 through 3.5.7, when autologin is ...)
 	- kdebase 4:3.5.7-4
 	NOTE: http://www.kde.org/info/security/advisory-20070919-1.txt
 CVE-2007-4568
@@ -1168,10 +1251,10 @@
 	NOT-FOR-US: American Financing eMail Image Upload
 CVE-2007-4498 (The Grandstream SIP Phone GXV-3000 with firmware 1.0.1.7, Loader ...)
 	NOT-FOR-US: Grandstream SIP Phone
-CVE-2007-4497
-	RESERVED
-CVE-2007-4496
-	RESERVED
+CVE-2007-4497 (Unspecified vulnerability in EMC VMware Workstation before 5.5.5 Build ...)
+	TODO: check
+CVE-2007-4496 (Unspecified vulnerability in EMC VMware Workstation before 5.5.5 Build ...)
+	TODO: check
 CVE-2007-4495 (Unspecified vulnerability in the ata disk driver in Sun Solaris 10 on ...)
 	NOT-FOR-US: Solaris
 CVE-2007-4494 (The tipafriend function in eZ publish before 3.8.9, and 3.9 before ...)
@@ -2114,11 +2197,9 @@
 	NOT-FOR-US: Webyapar
 CVE-2007-4067 (Absolute path traversal vulnerability in the clInetSuiteX6.clWebDav ...)
 	NOT-FOR-US: Clever Internet ActiveX Suite
-CVE-2007-4066
-	RESERVED
+CVE-2007-4066 (Multiple buffer overflows in Xiph.Org libvorbis before 1.2.0 allow ...)
 	NOTE: svn revisionsions fixing this: https://bugzilla.redhat.com/show_bug.cgi?id=249780
-CVE-2007-4065
-	RESERVED
+CVE-2007-4065 (lib/vorbisfile.c in libvorbisfile in Xiph.Org libvorbis before 1.2.0 ...)
 	NOTE: svn revisionsions fixing this: https://bugzilla.redhat.com/show_bug.cgi?id=249780
 CVE-2007-4064 (Multiple cross-site scripting (XSS) vulnerabilities in Drupal 5.x ...)
 	- drupal 4.7.7-1 (low)
@@ -2453,8 +2534,7 @@
 	RESERVED
 CVE-2007-3917
 	RESERVED
-CVE-2007-3916 [skktools insecure tempfile]
-	RESERVED
+CVE-2007-3916 (The main function in skkdic-expr.c in SKK Tools 1.2 allows local users ...)
 	- skktools 1.2+0.20061004-3
 CVE-2007-3915
 	RESERVED
@@ -4423,7 +4503,7 @@
 	NOTE: Not reproducibly reliably by an attacker, mostly a bug
 	NOTE: This is fixed by 9a08e732533b940d2d31f4e9999dfee5e1ca3914
 	NOTE: in Linus' tree.
-CVE-2007-3106 (libvorbis 1.1.2, and possibly other versions before 1.2.0, allows ...)
+CVE-2007-3106 (lib/info.c in libvorbis 1.1.2, and possibly other versions before ...)
 	- libvorbis 1.2.0.dfsg-1 (medium)
 CVE-2007-3105 (Stack-based buffer overflow in the random number generator (RNG) ...)
 	{DSA-1363-1}
@@ -12138,12 +12218,12 @@
 	RESERVED
 CVE-2007-0064
 	RESERVED
-CVE-2007-0063
-	RESERVED
-CVE-2007-0062
-	RESERVED
-CVE-2007-0061
-	RESERVED
+CVE-2007-0063 (Integer underflow in the DHCP server in EMC VMware Workstation before ...)
+	TODO: check
+CVE-2007-0062 (Integer overflow in the DHCP server in EMC VMware Workstation before ...)
+	TODO: check
+CVE-2007-0061 (The DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and ...)
+	TODO: check
 CVE-2007-0060 (Stack-based buffer overflow in the Message Queuing Server (Cam.exe) in ...)
 	NOT-FOR-US: CA
 CVE-2007-0059 (Cross-zone scripting vulnerability in Apple Quicktime 3 to 7.1.3 ...)
@@ -44626,7 +44706,7 @@
 	NOT-FOR-US: Advanced Guestbook
 CVE-2004-1212 (Directory traversal vulnerability in btdownload.php in Blog Torrent ...)
 	NOT-FOR-US: Blog Torrent
-CVE-2004-1211 (Multiple buffer overflows in Mercury/32 4.01a allow remote ...)
+CVE-2004-1211 (Multiple buffer overflows in the IMAP service in Mercury/32 4.01a ...)
 	NOT-FOR-US: Mercury Mail
 CVE-2004-1210 (Cross-site scripting (XSS) vulnerability in proxylog.dat in IPCop ...)
 	NOT-FOR-US: IpCop

More information about the Secure-testing-commits mailing list