[Secure-testing-commits] r14799 - data/CVE

[Joey Hess]

Author: joeyh
Date: 2010-06-04 21:14:47 +0000 (Fri, 04 Jun 2010)
New Revision: 14799

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-06-04 19:23:18 UTC (rev 14798)
+++ data/CVE/list	2010-06-04 21:14:47 UTC (rev 14799)
@@ -1,3 +1,63 @@
+CVE-2010-2157
+	RESERVED
+CVE-2010-2156
+	RESERVED
+CVE-2010-2155 (Multiple cross-site scripting (XSS) vulnerabilities in ...)
+	TODO: check
+CVE-2010-2154 (Cross-site scripting (XSS) vulnerability in the Search Site in CMScout ...)
+	TODO: check
+CVE-2010-2153 (Unrestricted file upload vulnerability in ...)
+	TODO: check
+CVE-2010-2152 (Unspecified vulnerability in JustSystems Ichitaro 2004 through 2009, ...)
+	TODO: check
+CVE-2010-2151 (Cross-site request forgery (CSRF) vulnerability in Fujitsu e-Pares V01 ...)
+	TODO: check
+CVE-2010-2150 (Cross-site scripting (XSS) vulnerability Fujitsu e-Pares V01 L01 ...)
+	TODO: check
+CVE-2010-2149 (Session fixation vulnerability in Fujitsu e-Pares V01 L01, L03, L10, ...)
+	TODO: check
+CVE-2010-2148 (SQL injection vulnerability in the My Car (com_mycar) component 1.0 ...)
+	TODO: check
+CVE-2010-2147 (Cross-site scripting (XSS) vulnerability in the My Car (com_mycar) ...)
+	TODO: check
+CVE-2010-2146 (PHP remote file inclusion vulnerability in banned.php in Visitor ...)
+	TODO: check
+CVE-2010-2145 (Multiple PHP remote file inclusion vulnerabilities in ClearSite Beta ...)
+	TODO: check
+CVE-2010-2144 (Cross-site scripting (XSS) vulnerability in signinform.php in Zeeways ...)
+	TODO: check
+CVE-2010-2143 (Directory traversal vulnerability in index.php in Symphony CMS 2.0.7 ...)
+	TODO: check
+CVE-2010-2142 (SQL injection vulnerability in default.asp in Cyberhost allows remote ...)
+	TODO: check
+CVE-2010-2141 (SQL injection vulnerability in index.php in NITRO Web Gallery allows ...)
+	TODO: check
+CVE-2010-2140 (SQL injection vulnerability in itemdetail.php in Multishop CMS allows ...)
+	TODO: check
+CVE-2010-2139 (SQL injection vulnerability in pages.php in Multishop CMS allows ...)
+	TODO: check
+CVE-2010-2138 (Multiple directory traversal vulnerabilities in ProMan 0.1.1 and ...)
+	TODO: check
+CVE-2010-2137 (PHP remote file inclusion vulnerability in _center.php in ProMan 0.1.1 ...)
+	TODO: check
+CVE-2010-2136 (Directory traversal vulnerability in admin/index.php in Article ...)
+	TODO: check
+CVE-2010-2135 (Multiple SQL injection vulnerabilities in login.php in HazelPress Lite ...)
+	TODO: check
+CVE-2010-2134 (Multiple SQL injection vulnerabilities in login.php in Project Man 1.0 ...)
+	TODO: check
+CVE-2010-2133 (SQL injection vulnerability in contact.php in My Little Forum allows ...)
+	TODO: check
+CVE-2010-2132 (Multiple PHP remote file inclusion vulnerabilities in Open Education ...)
+	TODO: check
+CVE-2010-2131 (SQL injection vulnerability in the Calendar Base (cal) extension ...)
+	TODO: check
+CVE-2010-2130 (Cross-site scripting (XSS) vulnerability in wflogin.jsp in Aris Global ...)
+	TODO: check
+CVE-2009-4882 (Cross-site scripting (XSS) vulnerability in zc/publisher/html.rb in ...)
+	TODO: check
+CVE-2008-7256 (mm/shmem.c in the Linux kernel before 2.6.28-rc8, when strict ...)
+	TODO: check
 CVE-2010-2129 (Directory traversal vulnerability in the JE Ajax Event Calendar ...)
 	NOT-FOR-US: JE Ajax Event Calenda
 CVE-2010-2128 (Directory traversal vulnerability in the JE Quotation Form ...)
@@ -1132,8 +1192,8 @@
 	RESERVED
 CVE-2010-1644
 	RESERVED
-CVE-2010-1643
-	RESERVED
+CVE-2010-1643 (mm/shmem.c in the Linux kernel before 2.6.28-rc3, when strict ...)
+	TODO: check
 CVE-2010-1642
 	RESERVED
 	- samba <unfixed> (unimportant)
@@ -1160,8 +1220,8 @@
 	NOTE: Only crashes a single connection, not the entire smbd
 CVE-2010-1634 (Multiple integer overflows in audioop.c in the audioop module in ...)
 	TODO: check
-CVE-2010-1633
-	RESERVED
+CVE-2010-1633 (RSA verification recovery in the EVP_PKEY_verify_recover function in ...)
+	TODO: check
 CVE-2010-1632
 	RESERVED
 CVE-2010-1631
@@ -3730,8 +3790,8 @@
 	{DSA-2042-1}
 	- iscsitarget 0.4.17+svn229-1.4 (medium; bug #574935)
 	- tgt 1:1.0.3-2 (medium; bug #576086)
-CVE-2010-0742
-	RESERVED
+CVE-2010-0742 (The Cryptographic Message Syntax (CMS) implementation in ...)
+	TODO: check
 CVE-2010-0741 (The virtio_net_bad_features function in hw/virtio-net.c in the ...)
 	- linux-2.6 2.6.26-1
 CVE-2010-0740 (The ssl3_get_record function in ssl/s3_pkt.c in OpenSSL 0.9.8f through ...)
@@ -4772,6 +4832,7 @@
 	- tor 0.2.1.22-1 (medium)
 	[lenny] - tor 0.2.0.35-1~lenny2 (medium)
 CVE-2010-0382 (ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before ...)
+	{DSA-2054-1}
 	- bind9 1:9.7.0.dfsg-1
 CVE-2010-0381 (SQL injection vulnerability in modules/arcade/index.php in PHP MySpace ...)
 	NOT-FOR-US: PHP MySpace Gold Edition
@@ -5103,6 +5164,7 @@
 	{DSA-2005-1 DSA-1996-1}
 	- linux-2.6 2.6.32-6
 CVE-2010-0290 (Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before ...)
+	{DSA-2054-1}
 	- bind9 1:9.7.0.dfsg-1 (medium)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=554851#c7
 CVE-2010-0289 (Multiple cross-site request forgery (CSRF) vulnerabilities in the ACL ...)
@@ -5744,6 +5806,7 @@
 	- clamav 0.96+dfsg-1
 	[lenny] - clamav <end-of-life> (No longer supported in Lenny)
 CVE-2010-0097 (ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before ...)
+	{DSA-2054-1}
 	- bind9 1:9.7.0.dfsg-1
 CVE-2010-0096
 	RESERVED