[Secure-testing-commits] r16275 - data/CVE

[Joey Hess]

Author: joeyh
Date: 2011-03-01 21:15:18 +0000 (Tue, 01 Mar 2011)
New Revision: 16275

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2011-03-01 15:40:35 UTC (rev 16274)
+++ data/CVE/list	2011-03-01 21:15:18 UTC (rev 16275)
@@ -1,3 +1,7 @@
+CVE-2011-1105 (Multiple cross-site scripting (XSS) vulnerabilities in Mutare EVM ...)
+	TODO: check
+CVE-2011-1104 (Multiple cross-site request forgery (CSRF) vulnerabilities in Mutare ...)
+	TODO: check
 CVE-2011-1103 (The WebReporting module in F-Secure Policy Manager 7.x, 8.00 before ...)
 	NOT-FOR-US: F-Secure Policy Manager
 CVE-2011-1102 (Cross-site scripting (XSS) vulnerability in the WebReporting module in ...)
@@ -227,8 +231,7 @@
 	- linux-2.6 2.6.37-1
 	[squeeze] - linux-2.6 <not-affected> (Introduced in 2.6.33)
 	[lenny] - linux-2.6 <not-affected> (Introduced in 2.6.33)
-CVE-2011-1020
-	RESERVED
+CVE-2011-1020 (The proc filesystem implementation in the Linux kernel 2.6.37 and ...)
 	- linux-2.6 <unfixed>
 CVE-2011-1019
 	RESERVED
@@ -240,8 +243,7 @@
 CVE-2011-1017
 	RESERVED
 	- linux-2.6 <unfixed>
-CVE-2011-1016
-	RESERVED
+CVE-2011-1016 (The Radeon GPU drivers in the Linux kernel before 2.6.38-rc5 do not ...)
 	- linux-2.6 <unfixed>
 CVE-2011-1015 [path traversal in CGIHTTPServer]
 	RESERVED
@@ -269,12 +271,10 @@
 	- linux-2.6 2.6.37-2
 CVE-2011-1009
 	RESERVED
-CVE-2011-1008 [Scrip's TicketObj info leak]
-	RESERVED
+CVE-2011-1008 (Scrips_Overlay.pm in Best Practical Solutions RT before 3.8.9 does not ...)
 	- request-tracker3.6 <removed>
 	- request-tracker3.8 <unfixed>
-CVE-2011-1007 [login page back button attack]
-	RESERVED
+CVE-2011-1007 (Best Practical Solutions RT before 3.8.9 does not perform certain ...)
 	- request-tracker3.6 <removed>
 	- request-tracker3.8 <unfixed>
 CVE-2011-1006
@@ -512,8 +512,8 @@
 	RESERVED
 CVE-2011-0926 (A certain ActiveX control in CSDWebInstaller.ocx in Cisco Secure ...)
 	NOT-FOR-US: Cisco Secure Desktop
-CVE-2011-0925
-	RESERVED
+CVE-2011-0925 (The CSDWebInstallerCtrl ActiveX control in CSDWebInstaller.ocx in ...)
+	TODO: check
 CVE-2011-0924 (The client in HP Data Protector does not verify the contents of files ...)
 	NOT-FOR-US: HP Data Protector
 CVE-2011-0923 (The client in HP Data Protector does not properly validate EXEC_CMD ...)