[Secure-testing-commits] r14196 - data/CVE
Kees Cook
kees at alioth.debian.org
Sat Mar 6 18:19:18 UTC 2010
Author: kees
Date: 2010-03-06 18:19:18 +0000 (Sat, 06 Mar 2010)
New Revision: 14196
Modified:
data/CVE/list
Log:
NFUs: 42
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2010-03-06 16:08:54 UTC (rev 14195)
+++ data/CVE/list 2010-03-06 18:19:18 UTC (rev 14196)
@@ -1,3 +1,43 @@
+CVE-2010-0935
+ NOT-FOR-US: Perforce Server
+CVE-2010-0934
+ NOT-FOR-US: Perforce Server
+CVE-2010-0933
+ NOT-FOR-US: Perforce Server
+CVE-2010-0932
+ NOT-FOR-US: Perforce Server
+CVE-2010-0931
+ NOT-FOR-US: Perforce Server
+CVE-2010-0930
+ NOT-FOR-US: Perforce Server
+CVE-2010-0929
+ NOT-FOR-US: Perforce Server
+CVE-2010-0927
+ NOT-FOR-US: IBM Lotus Domino
+CVE-2009-4676
+ NOT-FOR-US: JetCast.exe
+CVE-2009-4675
+ NOT-FOR-US: Mole Group Gastro Portal
+CVE-2009-4674
+ NOT-FOR-US: Mole Group Sky Hunter Airline Ticket Sale Script and Bus Ticket
+CVE-2009-4673
+ NOT-FOR-US: Mole Group Adult Portal Script
+CVE-2009-4672
+ NOT-FOR-US: WP-Lytebox plugin for WordPress
+CVE-2009-4671
+ NOT-FOR-US: RoomPHPlanning
+CVE-2009-4670
+ NOT-FOR-US: RoomPHPlanning
+CVE-2009-4669
+ NOT-FOR-US: RoomPHPlanning
+CVE-2009-4668
+ NOT-FOR-US: JetCast.exe
+CVE-2009-4667
+ NOT-FOR-US: WebMember
+CVE-2009-4666
+ NOT-FOR-US: Webradev Download Protect
+CVE-2009-4665
+ NOT-FOR-US: Cute Editor
CVE-2010-0925 (cfnetwork.dll 1.450.5.0 in CFNetwork, as used by safari.exe 531.21.10 ...)
NOT-FOR-US: Apple Safari
CVE-2010-0924 (cfnetwork.dll 1.450.5.0 in CFNetwork, as used by safari.exe 531.21.10 ...)
@@ -204,21 +244,21 @@
CVE-2009-4664 (Firewall Builder 3.0.4, 3.0.5, and 3.0.6, when running on Linux, ...)
TODO: check
CVE-2009-4663 (Heap-based buffer overflow in the Quiksoft EasyMail Objects 6 ActiveX ...)
- TODO: check
+ NOT-FOR-US: Quiksoft EasyMail Objects
CVE-2009-4662 (Cross-site scripting (XSS) vulnerability in the WebAccess component in ...)
- TODO: check
+ NOT-FOR-US: Novell GroupWise
CVE-2009-4661 (Multiple buffer overflows in BigAnt Server 2.50 SP6 and earlier allow ...)
- TODO: check
+ NOT-FOR-US: BigAnt Server
CVE-2009-4660 (Stack-based buffer overflow in the AntServer Module (AntServer.exe) in ...)
- TODO: check
+ NOT-FOR-US: BigAnt IM Server
CVE-2009-4659 (Unspecified vulnerability in MP3-Cutter Ease Audio Cutter 1.20 allows ...)
- TODO: check
+ NOT-FOR-US: MP3-Cutter Ease Audio Cutter
CVE-2009-4658 (Xerver 4.32 allows remote authenticated users to cause a denial of ...)
- TODO: check
+ NOT-FOR-US: Xerver
CVE-2009-4657 (The administrator package for Xerver 4.32 does not require ...)
- TODO: check
+ NOT-FOR-US: Xerver
CVE-2009-4656 (Stack-based buffer overflow in E-Soft DJ Studio Pro 4.2 including ...)
- TODO: check
+ NOT-FOR-US: E-Soft DJ Studio Pro
CVE-2010-XXXX [openssl power supply fluctuation fault-based key disclosure]
- openssl <unfixed> (low)
NOTE: http://www.eecs.umich.edu/~valeria/research/publications/DATE10RSA.pdf
@@ -346,7 +386,7 @@
CVE-2010-0767
RESERVED
CVE-2010-0766 (Integer overflow in the Swap4 function in valet4.dll in Luxology Modo ...)
- TODO: check
+ NOT-FOR-US: Luxology Modo
CVE-2010-0765 (fipsForum 2.6 stores sensitive information under the web root with ...)
NOT-FOR-US: fipsForum
CVE-2010-0764 (SQL injection vulnerability in index.php in KuwaitPHP eSmile allows ...)
@@ -795,17 +835,17 @@
CVE-2010-0593
RESERVED
CVE-2010-0592
- RESERVED
+ NOT-FOR-US: Cisco Unified Communications Manager
CVE-2010-0591
- RESERVED
+ NOT-FOR-US: Cisco Unified Communications Manager
CVE-2010-0590
- RESERVED
+ NOT-FOR-US: Cisco Unified Communications Manager
CVE-2010-0589
RESERVED
CVE-2010-0588
- RESERVED
+ NOT-FOR-US: Cisco Unified Communications Manager
CVE-2010-0587
- RESERVED
+ NOT-FOR-US: Cisco Unified Communications Manager
CVE-2010-0586
RESERVED
CVE-2010-0585
@@ -833,13 +873,13 @@
CVE-2010-0574
RESERVED
CVE-2010-0573
- RESERVED
+ NOT-FOR-US: Cisco Digital Media Player
CVE-2010-0572
- RESERVED
+ NOT-FOR-US: Cisco Digital Media Manager
CVE-2010-0571
- RESERVED
+ NOT-FOR-US: Cisco Digital Media Manager
CVE-2010-0570
- RESERVED
+ NOT-FOR-US: Cisco Digital Media Manager
CVE-2010-0569 (Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security ...)
NOT-FOR-US: Cisco
CVE-2010-0568 (Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security ...)
@@ -1109,7 +1149,7 @@
CVE-2010-0484
RESERVED
CVE-2010-0483 (VBScript in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server ...)
- TODO: check
+ NOT-FOR-US: Microsoft Windows
CVE-2010-0482
RESERVED
CVE-2010-0481
@@ -6967,7 +7007,7 @@
CVE-2009-3033 (Buffer overflow in the RunCmd method in the Altiris eXpress NS Console ...)
NOT-FOR-US: ActiveX
CVE-2009-3032
- RESERVED
+ NOT-FOR-US: Autonomy KeyView
CVE-2009-3031 (Stack-based buffer overflow in the BrowseAndSaveFile method in the ...)
NOT-FOR-US: Symantec Altiris Notification Server
CVE-2009-3030 (Cross-site scripting (XSS) vulnerability in Symantec ...)
@@ -8023,9 +8063,9 @@
CVE-2009-2755
RESERVED
CVE-2009-2754
- RESERVED
+ NOT-FOR-US: Informix Storage Manager
CVE-2009-2753
- RESERVED
+ NOT-FOR-US: Informix Storage Manager
CVE-2009-2752 (IBM WebSphere Commerce 7.0 does not properly encrypt data in a ...)
NOT-FOR-US: IBM WebSphere Commerce
CVE-2009-2751 (IBM WebSphere Commerce 7.0 uses the same cryptographic key for session ...)
More information about the Secure-testing-commits
mailing list