[Secure-testing-commits] r13638 - data/CVE

[Joey Hess]

Author: joeyh
Date: 2009-12-23 21:14:17 +0000 (Wed, 23 Dec 2009)
New Revision: 13638

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-12-23 20:35:50 UTC (rev 13637)
+++ data/CVE/list	2009-12-23 21:14:17 UTC (rev 13638)
@@ -1,3 +1,49 @@
+CVE-2009-4401 (SQL injection vulnerability in the Parish Administration Database ...)
+	TODO: check
+CVE-2009-4400 (Cross-site scripting (XSS) vulnerability in the Parish Administration ...)
+	TODO: check
+CVE-2009-4399 (SQL injection vulnerability in the Parish of the Holy Spirit Religious ...)
+	TODO: check
+CVE-2009-4398 (Cross-site scripting (XSS) vulnerability in the Parish of the Holy ...)
+	TODO: check
+CVE-2009-4397 (Cross-site scripting (XSS) vulnerability in the Diocese of Portsmouth ...)
+	TODO: check
+CVE-2009-4396 (SQL injection vulnerability in the Diocese of Portsmouth Resources ...)
+	TODO: check
+CVE-2009-4395 (Cross-site scripting (XSS) vulnerability in the Random Prayer 2 ...)
+	TODO: check
+CVE-2009-4394 (SQL injection vulnerability in the Random Prayer 2 (ste_prayer2) ...)
+	TODO: check
+CVE-2009-4393 (SQL injection vulnerability in the Document Directorys ...)
+	TODO: check
+CVE-2009-4392 (SQL injection vulnerability in the XDS Staff List (xds_staff) ...)
+	TODO: check
+CVE-2009-4391 (Cross-site scripting (XSS) vulnerability in the File list (dr_blob) ...)
+	TODO: check
+CVE-2009-4390 (SQL injection vulnerability in the Car (car) extension 0.1.1 for TYPO3 ...)
+	TODO: check
+CVE-2009-4389 (Unspecified vulnerability in the Watchdog (aba_watchdog) extension ...)
+	TODO: check
+CVE-2009-4388 (Cross-site scripting (XSS) vulnerability in the ListMan (nl_listman) ...)
+	TODO: check
+CVE-2009-4387 (The cross-site scripting (XSS) protection mechanism in ...)
+	TODO: check
+CVE-2009-4386 (SQL injection vulnerability in hotel_tiempolibre_ext.php in Venalsur ...)
+	TODO: check
+CVE-2009-4385 (Multiple cross-site request forgery (CSRF) vulnerabilities in ...)
+	TODO: check
+CVE-2009-4384 (Multiple cross-site scripting (XSS) vulnerabilities in Scriptsez.net ...)
+	TODO: check
+CVE-2009-4383 (Directory traversal vulnerability in Pforum.php in Rocomotion P forum ...)
+	TODO: check
+CVE-2009-4382 (Cross-site scripting (XSS) vulnerability in module.php in PHPFABER ...)
+	TODO: check
+CVE-2009-4381 (Cross-site scripting (XSS) vulnerability in index.php in texmedia ...)
+	TODO: check
+CVE-2009-4380 (Multiple SQL injection vulnerabilities in Valarsoft Webmatic before ...)
+	TODO: check
+CVE-2009-4379 (Multiple cross-site scripting (XSS) vulnerabilities in Valarsoft ...)
+	TODO: check
 CVE-2010-0095
 	RESERVED
 CVE-2010-0094
@@ -776,8 +822,8 @@
 	TODO: determine real impact
 CVE-2009-4141
 	RESERVED
-CVE-2009-4140
-	RESERVED
+CVE-2009-4140 (Unrestricted file upload vulnerability in ofc_upload_image.php in Open ...)
+	TODO: check
 CVE-2009-4139
 	RESERVED
 CVE-2009-4138 (drivers/firewire/ohci.c in the Linux kernel before 2.6.32-git9, when ...)
@@ -1050,6 +1096,7 @@
 	- acpid <not-affected> (problem in redhat-specific patch; debian uses sensible permissions 0664)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=515062
 CVE-2009-4031 (The do_insn_fetch function in arch/x86/kvm/emulate.c in the x86 ...)
+	{DSA-1962-1}
 	- linux-2.6 <unfixed> (low)
 	[etch] - linux-2.6 <not-affected> (kvm introduced in 2.6.25)
 	- linux-2.6.24 <not-affected> (kvm introduced in 2.6.25)
@@ -1935,6 +1982,7 @@
 	- asterisk 1:1.6.2.0~rc3-2 (medium; bug #552756)
 	NOTE: http://downloads.asterisk.org/pub/security/AST-2009-007.html
 CVE-2009-3722 (The handle_dr function in arch/x86/kvm/vmx.c in the KVM subsystem in ...)
+	{DSA-1962-1}
 	[etch] - linux-2.6 <not-affected> (issue introduced in 2.6.30-rc1)
 	[lenny] - linux-2.6 <not-affected> (issue introduced in 2.6.30-rc1)
 	- linux-2.6 2.6.31-1 (low)
@@ -2049,8 +2097,8 @@
 	NOT-FOR-US: ZoIPer
 CVE-2009-3703 (Multiple SQL injection vulnerabilities in the WP-Forum plugin before ...)
 	TODO: check
-CVE-2009-3702
-	RESERVED
+CVE-2009-3702 (Multiple absolute path traversal vulnerabilities in PHP-Calendar 1.1 ...)
+	TODO: check
 CVE-2009-3701 (Multiple cross-site scripting (XSS) vulnerabilities in the ...)
 	- horde3 3.3.6+debian0-1 (low)
 	[lenny] - horde3 <no-dsa> (minor issue)
@@ -2196,7 +2244,7 @@
 	- proftpd-dfsg 1.3.2a-2 (low)
 	NOTE: http://bugs.proftpd.org/show_bug.cgi?id=3275
 CVE-2009-3638 (Integer overflow in the kvm_dev_ioctl_get_supported_cpuid function in ...)
-	{DSA-1927-1}
+	{DSA-1962-1 DSA-1927-1}
 	- linux-2.6 2.6.31-1 (medium)
 	[etch] - linux-2.6 <not-affected> (introduced in 2.6.25)
 	NOTE: fixed in upstream 2.6.32-rc4
@@ -2387,6 +2435,7 @@
 	- virtualbox-ose 3.0.8-dfsg-1
 	[lenny] - virtualbox-ose <not-affected> (vulnerable code not present)
 CVE-2009-3602 (Unbound before 1.3.4 does not properly verify signatures for NSEC3 ...)
+	{DSA-1963-1}
 	- unbound 1.3.4-1 (low)
 	NOTE: http://unbound.net/pipermail/unbound-users/2009-October/000852.html
 CVE-2009-3601 (Cross-site scripting (XSS) vulnerability in demo_page.php in Scriptsez ...)