[Secure-testing-commits] r16292 - in data: . CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2011-03-03 08:39:57 +0000 (Thu, 03 Mar 2011)
New Revision: 16292

Modified:
   data/CVE/list
   data/spu-candidates.txt
Log:
CVE assignments


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2011-03-03 07:24:22 UTC (rev 16291)
+++ data/CVE/list	2011-03-03 08:39:57 UTC (rev 16292)
@@ -404,22 +404,31 @@
 	NOT-FOR-US: WebSCADA
 CVE-2008-7274 (IBM WebSphere Application Server (WAS) 6.1.0.9, when the JAAS Login ...)
 	NOT-FOR-US: IBM WebSphere Application Server
-CVE-2010-XXXX [kfreebsd dos]
+CVE-2011-1132 [kfreebsd dos]
 	- kfreebsd-8 <unfixed> (low; bug #613312; bug #611476)
 	[squeeze] - kfreebsd-8 <no-dsa> (Can be fixed through a point update)
 	[lenny] - kfreebsd-8 <no-dsa> (Not-supported in Lenny)
 	- kfreebsd-7 <unfixed> (bug #613312)
 	[lenny] - kfreebsd-7 <no-dsa> (Not supported in Lenny)
-	NOTE: CVE ID requested
-CVE-2010-XXXX [xinha multiple vulns]
+CVE-2011-1133 [xinha XSS mode param]
 	- serendipity <unfixed> (bug #611661)
 	[lenny] - serendipity <not-affected> (Xinha not yet included)
 	- openacs <unfixed>
 	- dotlrn <unfixed>
-	TODO: check & request ids
 	NOTE: http://secunia.com/advisories/40669/
-	NOTE: CVE ID requested
-CVE-2011-XXXX [proftpd mod_sftp DoS]
+CVE-2011-1134 [xinha XSS image manager]
+	- serendipity <unfixed> (bug #611661)
+	[lenny] - serendipity <not-affected> (Xinha not yet included)
+	- openacs <unfixed>
+	- dotlrn <unfixed>
+	NOTE: http://secunia.com/advisories/40669/
+CVE-2011-1135 [xinha multiple vulns]
+	- serendipity <unfixed> (bug #611661)
+	[lenny] - serendipity <not-affected> (Xinha not yet included)
+	- openacs <unfixed>
+	- dotlrn <unfixed>
+	NOTE: http://secunia.com/advisories/40669/
+CVE-2011-1137 [proftpd mod_sftp DoS]
 	- proftpd-dfsg <unfixed>
 	NOTE: http://bugs.proftpd.org/show_bug.cgi?id=3586
 	NOTE: http://www.exploit-db.com/exploits/16129/
@@ -914,11 +923,10 @@
 CVE-2011-XXXX [wordpress multiple issues]
 	- wordpress 3.0.5+dfsg-1
 	NOTE: http://codex.wordpress.org/Version_3.0.5
-CVE-2011-XXXX [tesseract tempfile]
+CVE-2011-1136 [tesseract tempfile]
 	- tesseract 2.04-2.1 (low; bug #612032)
 	[squeeze] - tesseract <no-dsa> (Minor issue)
 	[lenny] - tesseract <no-dsa> (Minor issue)
-	NOTE: CVE ID requested
 CVE-2011-XXXX [conky tempfile]
 	- conky <unfixed> (low; bug #612033)
 	[squeeze] - conky <no-dsa> (Minor issue)

Modified: data/spu-candidates.txt
===================================================================
--- data/spu-candidates.txt	2011-03-03 07:24:22 UTC (rev 16291)
+++ data/spu-candidates.txt	2011-03-03 08:39:57 UTC (rev 16292)
@@ -41,7 +41,7 @@
 
 --
 
-tesseract (CVE-2011-XXXX)
+tesseract (CVE-2011-1136)
 #612032
 awaiting maintainer response