[Secure-testing-commits] r12650 - data/CVE

[Joey Hess]

Author: joeyh
Date: 2009-08-20 21:14:17 +0000 (Thu, 20 Aug 2009)
New Revision: 12650

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-08-20 16:02:38 UTC (rev 12649)
+++ data/CVE/list	2009-08-20 21:14:17 UTC (rev 12650)
@@ -1,3 +1,51 @@
+CVE-2009-2880
+	RESERVED
+CVE-2009-2879
+	RESERVED
+CVE-2009-2878
+	RESERVED
+CVE-2009-2877
+	RESERVED
+CVE-2009-2876
+	RESERVED
+CVE-2009-2875
+	RESERVED
+CVE-2009-2874
+	RESERVED
+CVE-2009-2873
+	RESERVED
+CVE-2009-2872
+	RESERVED
+CVE-2009-2871
+	RESERVED
+CVE-2009-2870
+	RESERVED
+CVE-2009-2869
+	RESERVED
+CVE-2009-2868
+	RESERVED
+CVE-2009-2867
+	RESERVED
+CVE-2009-2866
+	RESERVED
+CVE-2009-2865
+	RESERVED
+CVE-2009-2864
+	RESERVED
+CVE-2009-2863
+	RESERVED
+CVE-2009-2862
+	RESERVED
+CVE-2009-2861
+	RESERVED
+CVE-2009-2860 (Unspecified vulnerability in db2jds in IBM DB2 8.1 before FP18 allows ...)
+	TODO: check
+CVE-2009-2859 (IBM DB2 8.1 before FP18 allows attackers to obtain unspecified access ...)
+	TODO: check
+CVE-2009-2858 (Memory leak in the Security component in IBM DB2 8.1 before FP18 on ...)
+	TODO: check
+CVE-2009-2857 (The kernel in Sun Solaris 8, 9, and 10, and OpenSolaris before ...)
+	TODO: check
 CVE-2009-2856 (Sun Virtual Desktop Infrastructure (VDI) 3.0, when anonymous binding ...)
 	NOT-FOR-US: Sun Virtual Desktop Infrastructure
 CVE-2009-2855 (The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 ...)
@@ -364,8 +412,8 @@
 	RESERVED
 CVE-2009-2741
 	RESERVED
-CVE-2009-2740
-	RESERVED
+CVE-2009-2740 (kmxIds.sys before 7.3.1.18 in CA Host-Based Intrusion Prevention ...)
+	TODO: check
 CVE-2009-2739 (Cross-site scripting (XSS) vulnerability in FreeNAS before 0.69.2 ...)
 	NOT-FOR-US: FreeNAS
 CVE-2009-2738 (Cross-site request forgery (CSRF) vulnerability in the WebGUI in ...)
@@ -636,6 +684,7 @@
 	RESERVED
 CVE-2009-2694
 	RESERVED
+	{DSA-1870-1}
 	- pidgin 2.5.9-1 (medium; bug #542486)
 	- gaim <removed>
 CVE-2009-2693
@@ -898,8 +947,8 @@
 	RESERVED
 CVE-2009-2628
 	RESERVED
-CVE-2009-2627
-	RESERVED
+CVE-2009-2627 (The Acer LunchApp (aka AcerCtrls.APlunch) ActiveX control in ...)
+	TODO: check
 CVE-2009-2626
 	RESERVED
 CVE-2009-2625 (Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in ...)
@@ -2414,8 +2463,8 @@
 	NOT-FOR-US: Microsoft Internet Explorer
 CVE-2009-2056
 	RESERVED
-CVE-2009-2055
-	RESERVED
+CVE-2009-2055 (Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a ...)
+	TODO: check
 CVE-2009-2054
 	RESERVED
 CVE-2009-2053
@@ -2859,8 +2908,8 @@
 	- xerces-c <unfixed> (low; bug #540297)
 	- xerces-c2 <unfixed> (low; bug #541986)
 	- xerces27 <removed>
-CVE-2009-1884
-	RESERVED
+CVE-2009-1884 (Off-by-one error in the bzinflate function in Bzip2.xs in the ...)
+	TODO: check
 CVE-2009-1883
 	RESERVED
 CVE-2009-1882 (Integer overflow in the XMakeImage function in magick/xwindow.c in ...)
@@ -7076,8 +7125,8 @@
 	RESERVED
 CVE-2009-0683
 	RESERVED
-CVE-2009-0682
-	RESERVED
+CVE-2009-0682 (vetmonnt.sys in CA Internet Security Suite r3, vetmonnt.sys before ...)
+	TODO: check
 CVE-2009-0681 (PGP Desktop before 9.10 allows local users to (1) cause a denial of ...)
 	NOT-FOR-US: PGP Desktop
 CVE-2009-0680 (cgi-bin/welcome/VPN_only in the web interface in Netgear SSL312 allows ...)
@@ -39364,7 +39413,7 @@
 	NOT-FOR-US: PortailPhp
 CVE-2007-0820 (Multiple PHP remote file inclusion vulnerabilities in Cedric CLAIRE ...)
 	NOT-FOR-US: PortailPhp
-CVE-2007-0819 (HP Network Node Manager (NNM) Remote Console 7.50 assigns Everyone ...)
+CVE-2007-0819 (HP Network Node Manager (NNM) Remote Console 7.50, 7.51, and 7.53 ...)
 	NOT-FOR-US: HP Network Node Manager
 CVE-2007-0818
 	REJECTED