[Secure-testing-commits] r11836 - data/CVE

[Joey Hess]

Author: joeyh
Date: 2009-05-07 21:14:16 +0000 (Thu, 07 May 2009)
New Revision: 11836

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-05-07 20:39:09 UTC (rev 11835)
+++ data/CVE/list	2009-05-07 21:14:16 UTC (rev 11836)
@@ -1,3 +1,69 @@
+CVE-2009-1581
+	RESERVED
+CVE-2009-1580
+	RESERVED
+CVE-2009-1579
+	RESERVED
+CVE-2009-1578
+	RESERVED
+CVE-2009-1577
+	RESERVED
+CVE-2009-1576 (Unspecified vulnerability in Drupal 5.x before 5.17 and 6.x before ...)
+	TODO: check
+CVE-2009-1575 (Cross-site scripting (XSS) vulnerability in Drupal 5.x before 5.17 and ...)
+	TODO: check
+CVE-2009-1574 (racoon/isakmp_frag.c in ipsec-tools before 0.7.2 allows remote ...)
+	TODO: check
+CVE-2009-1573 (xvfb-run 1.6.1 in Debian GNU/Linux, Ubuntu, Fedora 10, and possibly ...)
+	TODO: check
+CVE-2009-1571
+	RESERVED
+CVE-2009-1570
+	RESERVED
+CVE-2009-1569
+	RESERVED
+CVE-2009-1568
+	RESERVED
+CVE-2009-1567
+	RESERVED
+CVE-2009-1566
+	RESERVED
+CVE-2009-1565
+	RESERVED
+CVE-2009-1564
+	RESERVED
+CVE-2009-1563
+	RESERVED
+CVE-2009-1562
+	RESERVED
+CVE-2009-1561 (Cross-site request forgery (CSRF) vulnerability in administration.cgi ...)
+	TODO: check
+CVE-2009-1560 (The Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 ...)
+	TODO: check
+CVE-2009-1559 (Absolute path traversal vulnerability in adm/file.cgi on the Cisco ...)
+	TODO: check
+CVE-2009-1558 (Directory traversal vulnerability in adm/file.cgi on the Cisco Linksys ...)
+	TODO: check
+CVE-2009-1557 (Multiple cross-site scripting (XSS) vulnerabilities on the Cisco ...)
+	TODO: check
+CVE-2009-1556 (img/main.cgi on the Cisco Linksys WVC54GCA wireless video camera with ...)
+	TODO: check
+CVE-2009-1555 (The Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 ...)
+	TODO: check
+CVE-2009-1554 (Cross-site scripting (XSS) vulnerability in ThemeServlet.java in Sun ...)
+	TODO: check
+CVE-2009-1553 (Multiple cross-site scripting (XSS) vulnerabilities in the Admin ...)
+	TODO: check
+CVE-2009-1552 (Unspecified vulnerability in the IGMP driver in SCO Unixware Release ...)
+	TODO: check
+CVE-2009-1551 (Multiple PHP remote file inclusion vulnerabilities in Qt quickteam 2 ...)
+	TODO: check
+CVE-2009-1550 (Zakkis Technology ABC Advertise 1.0 does not properly restrict access ...)
+	TODO: check
+CVE-2009-1549 (AGTC MyShop 3.2b allows remote attackers to bypass authentication and ...)
+	TODO: check
+CVE-2009-1548 (SQL injection vulnerability in index.php in BluSky CMS allows remote ...)
+	TODO: check
 CVE-2009-XXXX [prewkikka: pasword world-readable]
 	- prewikka <unfixed> (low; bug #527476)
 	NOTE: asked maintainer to determine wether debian is affected
@@ -200,7 +266,7 @@
 	- samba 2:3.2.6 (bug #514151)
 	[lenny] - samba 2:3.2.5-4lenny1
 	[etch] - samba <not-affected> (Bug not yet present in Etch's version)
-CVE-2009-1572 [Quagga bgpd crash related to 4-byte AS numbers]
+CVE-2009-1572 (The BGP daemon (bgpd) in Quagga 0.99.11 and earlier allows remote ...)
 	{DSA-1788-1}
 	- quagga 0.99.11-2 (high; bug #526270)
 	[lenny] - quagga 0.99.10-1lenny2