[Secure-testing-commits] r11749 - data/CVE

Thu Apr 30 21:14:15 UTC 2009

Author: joeyh
Date: 2009-04-30 21:14:15 +0000 (Thu, 30 Apr 2009)
New Revision: 11749

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2009-04-30 20:14:55 UTC (rev 11748)
+++ data/CVE/list	2009-04-30 21:14:15 UTC (rev 11749)
@@ -1,3 +1,41 @@
+CVE-2009-1489 (includes/user.php in Fungamez RC1 allows remote attackers to bypass ...)
+	TODO: check
+CVE-2009-1488 (Directory traversal vulnerability in admin/load.php in FunGamez RC1 ...)
+	TODO: check
+CVE-2009-1487 (SQL injection vulnerability in pages/login.php in FunGamez RC1 allows ...)
+	TODO: check
+CVE-2009-1486 (Directory traversal vulnerability in pmscript.php in Flatchat 3.0 ...)
+	TODO: check
+CVE-2009-1485 (The logging feature in eMule Plus before 1.2e allows remote attackers ...)
+	TODO: check
+CVE-2009-1484 (Cross-site scripting (XSS) vulnerability in the web mail interface ...)
+	TODO: check
+CVE-2009-1483 (Unrestricted file upload vulnerability in upload-file.php in Adam ...)
+	TODO: check
+CVE-2009-1482 (Multiple cross-site scripting (XSS) vulnerabilities in ...)
+	TODO: check
+CVE-2009-1481 (SQL injection vulnerability in action.asp in PuterJam's Blog (PJBlog3) ...)
+	TODO: check
+CVE-2009-1480 (SQL injection vulnerability in index.php Pragyan CMS 2.6.4 allows ...)
+	TODO: check
+CVE-2009-1479
+	RESERVED
+CVE-2009-1478 (Multiple unspecified vulnerabilities in the DTrace ioctl handlers in ...)
+	TODO: check
+CVE-2008-6774 (internettoolbar/edit.php in YourPlace 1.0.2 and earlier does not end ...)
+	TODO: check
+CVE-2008-6773 (Static code injection vulnerability in user/internettoolbar/edit.php ...)
+	TODO: check
+CVE-2008-6772 (login/register_form.php in YourPlace 1.0.2 and earlier does not check ...)
+	TODO: check
+CVE-2008-6771 (YourPlace 1.0.2 and earlier allows remote attackers to obtain ...)
+	TODO: check
+CVE-2008-6770 (YourPlace 1.0.2 and earlier stores sensitive information under the web ...)
+	TODO: check
+CVE-2008-6769 (Unrestricted file upload vulnerability in upload.php in YourPlace ...)
+	TODO: check
+CVE-2008-6768 (Unrestricted file upload vulnerability in admin/editor/images.php in ...)
+	TODO: check
 CVE-2009-1477
 	RESERVED
 CVE-2009-1476
@@ -118,14 +156,14 @@
 	NOT-FOR-US: SilverStripe
 CVE-2009-1432
 	RESERVED
-CVE-2009-1431
-	RESERVED
-CVE-2009-1430
-	RESERVED
-CVE-2009-1429
-	RESERVED
-CVE-2009-1428
-	RESERVED
+CVE-2009-1431 (XFR.EXE in the Intel File Transfer service in the console in Symantec ...)
+	TODO: check
+CVE-2009-1430 (Multiple stack-based buffer overflows in IAO.EXE in the Intel Alert ...)
+	TODO: check
+CVE-2009-1429 (The Intel LANDesk Common Base Agent (CBA) in Symantec Alert Management ...)
+	TODO: check
+CVE-2009-1428 (Multiple cross-site scripting (XSS) vulnerabilities in ccLgView.exe in ...)
+	TODO: check
 CVE-2009-1427
 	RESERVED
 CVE-2009-1426
@@ -647,6 +685,7 @@
 CVE-2009-1273 (pam_ssh 1.92 and possibly other versions, as used when PAM is compiled ...)
 	- pam <not-affected> (we don't compile pam with USE=ssh)
 CVE-2009-1272 (The php_zip_make_relative_path function in php_zip.c in PHP 5.2.x ...)
+	{DTSA-188-1}
 	- php5 5.2.6.dfsg.1-3
 	[etch] - php5 <not-affected> (this is caused by the fix for CVE-2008-5658, which was not applied to php4)
 	- php4 <not-affected> (this is caused by the fix for CVE-2008-5658, which was not applied to php4)
@@ -1843,6 +1882,7 @@
 CVE-2009-0947
 	RESERVED
 CVE-2009-0946 (Multiple integer overflows in FreeType 2.3.9 and earlier allow remote ...)
+	{DSA-1784-1}
 	- freetype 2.3.9-4.1 (medium; bug #524925)
 CVE-2009-0945
 	RESERVED
@@ -2807,8 +2847,8 @@
 	RESERVED
 CVE-2009-0720
 	RESERVED
-CVE-2009-0719
-	RESERVED
+CVE-2009-0719 (Unspecified vulnerability in useradd in HP HP-UX B.11.11, B.11.23, and ...)
+	TODO: check
 CVE-2009-0718 (Unspecified vulnerability in HP StorageWorks Storage Mirroring 5 ...)
 	NOT-FOR-US: HP StorageWorks Storage Mirroring
 CVE-2009-0717 (Unspecified vulnerability in HP StorageWorks Storage Mirroring 5 ...)
@@ -6157,8 +6197,8 @@
 	NOT-FOR-US: DrWeb Anti-virus
 CVE-2008-5525 (ClamAV 0.94.1 and possibly 0.93.1, when Internet Explorer 6 or 7 is ...)
 	- clamav <not-affected> (medium; bug #526041)
-        NOTE: this issue refers to a clamav antivirus bypass that occurs when the user
-        NOTE: is using IE6 or IE7 to open a malicious page with an MZ header
+	NOTE: this issue refers to a clamav antivirus bypass that occurs when the user
+	NOTE: is using IE6 or IE7 to open a malicious page with an MZ header
 	NOTE: - all other browsers are not vulnerable
 	NOTE: - see http://xforce.iss.net/xforce/xfdb/47435 and bug report for details
 CVE-2008-5524 (CAT-QuickHeal 10.00 and possibly 9.50, when Internet Explorer 6 or 7 ...)
@@ -8799,6 +8839,7 @@
 CVE-2008-4457 (SQL injection vulnerability in inc/inc_statistics.php in MemHT Portal ...)
 	NOT-FOR-US: MemHT Portal
 CVE-2008-4456 (Cross-site scripting (XSS) vulnerability in the command-line client in ...)
+	{DSA-1783-1}
 	- mysql-dfsg-5.0 5.0.51-1 (low)
 CVE-2008-4455 (Directory traversal vulnerability in index.php in EKINdesigns MySQL ...)
 	NOT-FOR-US: EKINdesigns MySQL Quick Admin
@@ -10150,6 +10191,7 @@
 	- ssmtp 2.62-1.1 (low; bug #498366)
 	[etch] - ssmtp <no-dsa> (Minor issue, only affects rare corner cases)
 CVE-2008-3963 (MySQL 5.0 before 5.0.66, 5.1 before 5.1.26, and 6.0 before 6.0.6 does ...)
+	{DSA-1783-1}
 	- mysql-dfsg-5.0 5.0.51a-15 (low; bug #498362)
 CVE-2008-3964 (Multiple off-by-one errors in libpng before 1.2.32beta01, and 1.4 ...)
 	- libpng 1.2.27-2 (low; bug #501109)


