[Secure-testing-commits] r16026 - data/CVE

[Joey Hess]

Author: joeyh
Date: 2011-02-01 21:14:37 +0000 (Tue, 01 Feb 2011)
New Revision: 16026

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2011-02-01 06:57:03 UTC (rev 16025)
+++ data/CVE/list	2011-02-01 21:14:37 UTC (rev 16026)
@@ -1,3 +1,99 @@
+CVE-2011-0720
+	RESERVED
+CVE-2011-0719
+	RESERVED
+CVE-2011-0718
+	RESERVED
+CVE-2011-0717
+	RESERVED
+CVE-2011-0716
+	RESERVED
+CVE-2011-0715
+	RESERVED
+CVE-2011-0714
+	RESERVED
+CVE-2011-0713
+	RESERVED
+CVE-2011-0712
+	RESERVED
+CVE-2011-0711
+	RESERVED
+CVE-2011-0710
+	RESERVED
+CVE-2011-0709
+	RESERVED
+CVE-2011-0708
+	RESERVED
+CVE-2011-0707
+	RESERVED
+CVE-2011-0706
+	RESERVED
+CVE-2011-0705
+	RESERVED
+CVE-2011-0704
+	RESERVED
+CVE-2011-0703
+	RESERVED
+CVE-2011-0702
+	RESERVED
+CVE-2011-0701
+	RESERVED
+CVE-2011-0700
+	RESERVED
+CVE-2011-0699
+	RESERVED
+CVE-2011-0698
+	RESERVED
+CVE-2011-0697
+	RESERVED
+CVE-2011-0696
+	RESERVED
+CVE-2011-0695
+	RESERVED
+CVE-2011-0694
+	RESERVED
+CVE-2011-0693
+	RESERVED
+CVE-2011-0692
+	RESERVED
+CVE-2011-0691
+	RESERVED
+CVE-2011-0690
+	RESERVED
+CVE-2011-0689
+	RESERVED
+CVE-2011-0688 (Intel Alert Management System (aka AMS or AMS2), as used in Symantec ...)
+	TODO: check
+CVE-2011-0687 (Opera before 11.01 does not properly implement Wireless Application ...)
+	TODO: check
+CVE-2011-0686 (Unspecified vulnerability in Opera before 11.01 allows remote ...)
+	TODO: check
+CVE-2011-0685 (The Delete Private Data feature in Opera before 11.01 does not ...)
+	TODO: check
+CVE-2011-0684 (Opera before 11.01 does not properly handle redirections and ...)
+	TODO: check
+CVE-2011-0683 (Opera before 11.01 does not properly restrict the use of opera: URLs, ...)
+	TODO: check
+CVE-2011-0682 (Opera before 11.01 does not properly handle large form inputs, which ...)
+	TODO: check
+CVE-2011-0681 (The Cascading Style Sheets (CSS) Extensions for XML implementation in ...)
+	TODO: check
+CVE-2011-0680 (data/WorkingMessage.java in the Mms application in Android before ...)
+	TODO: check
+CVE-2010-4717 (Multiple stack-based buffer overflows in the IMAP server component in ...)
+	TODO: check
+CVE-2010-4716 (Cross-site scripting (XSS) vulnerability in the WebPublisher component ...)
+	TODO: check
+CVE-2010-4715 (Multiple directory traversal vulnerabilities in the (1) WebAccess ...)
+	TODO: check
+CVE-2010-4714 (Multiple stack-based buffer overflows in Novell GroupWise before ...)
+	TODO: check
+CVE-2010-4713 (Integer signedness error in gwia.exe in GroupWise Internet Agent ...)
+	TODO: check
+CVE-2010-4712 (Multiple stack-based buffer overflows in gwia.exe in GroupWise ...)
+	TODO: check
+CVE-2010-4711 (Double free vulnerability in the IMAP server component in GroupWise ...)
+	TODO: check
 CVE-2011-0679 (IBM WebSphere Portal 6.0.1.1 through 7.0.0.0, as used in IBM Lotus Web ...)
 	NOT-FOR-US: IBM WebSphere Portal
 CVE-2011-0678 (Unrestricted file upload vulnerability in the EasyEdit module in ...)
@@ -551,8 +647,8 @@
 	RESERVED
 CVE-2011-0451
 	RESERVED
-CVE-2011-0450
-	RESERVED
+CVE-2011-0450 (The downloads manager in Opera before 11.01 on Windows does not ...)
+	TODO: check
 CVE-2011-0449
 	RESERVED
 CVE-2011-0448
@@ -641,8 +737,7 @@
 	RESERVED
 CVE-2011-0414
 	RESERVED
-CVE-2011-0413 [remote crash on DHCPv6 servers]
-	RESERVED
+CVE-2011-0413 (The DHCPv6 server in ISC DHCP 4.0.x and 4.1.x before 4.1.2-P1, 4.0-ESV ...)
 	- isc-dhcp <unfixed> (bug #611217)
 	- dhcp3 <not-affected> (vuln code introduced in 4.0)
 	- dhcp <not-affected> (vuln code introduced in 4.0)
@@ -1560,8 +1655,8 @@
 	RESERVED
 CVE-2011-0097
 	RESERVED
-CVE-2011-0096
-	RESERVED
+CVE-2011-0096 (The MHTML implementation in Microsoft Windows XP SP2 and SP3, Windows ...)
+	TODO: check
 CVE-2011-0095
 	RESERVED
 CVE-2011-0094
@@ -2337,8 +2432,7 @@
 	NOT-FOR-US: RealPlayer
 CVE-2010-4394 (Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through ...)
 	NOT-FOR-US: RealPlayer
-CVE-2010-4393
-	RESERVED
+CVE-2010-4393 (Heap-based buffer overflow in vidplin.dll in RealNetworks RealPlayer ...)
 	NOT-FOR-US: RealPlayer
 CVE-2010-4392 (Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through ...)
 	NOT-FOR-US: RealPlayer
@@ -2397,7 +2491,7 @@
 	[lenny] - awstats 6.7.dfsg-5.1+lenny1
 CVE-2009-5020 (Open redirect vulnerability in awredir.pl in AWStats before 6.95 ...)
 	- awstats 6.9.5~dfsg-1 (unimportant)
-CVE-2010-4338 (ocrodjvu 0.4.6-1 on Debian GNU/Linux, when using Cuneiform as the OCR ...)
+CVE-2010-4338 (ocrodjvu 0.4.6-1 on Debian GNU/Linux allows local users to modify ...)
 	- ocrodjvu 0.4.6-2 (low; bug #598134)
 CVE-2010-4339 (Cross-site scripting (XSS) vulnerability in Hypermail 2.2.0 allows ...)
 	- hypermail <removed> (low; bug #598743)
@@ -14660,10 +14754,10 @@
 	NOT-FOR-US: Symantec Norton Mobile Security application 1.0
 CVE-2010-0112 (Multiple SQL injection vulnerabilities in the Administrative Interface ...)
 	NOT-FOR-US: Symantec IM Manager
-CVE-2010-0111
-	RESERVED
-CVE-2010-0110
-	RESERVED
+CVE-2010-0111 (HDNLRSVC.EXE in the Intel Alert Handler service (aka Symantec Intel ...)
+	TODO: check
+CVE-2010-0110 (Multiple stack-based buffer overflows in Intel Alert Management System ...)
+	TODO: check
 CVE-2010-0109
 	RESERVED
 CVE-2010-0108 (Buffer overflow in the cliproxy.objects.1 ActiveX control in the ...)