[Secure-testing-commits] r17720 - data/CVE

Wed Nov 30 21:14:24 UTC 2011

Author: joeyh
Date: 2011-11-30 21:14:24 +0000 (Wed, 30 Nov 2011)
New Revision: 17720

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2011-11-30 21:13:46 UTC (rev 17719)
+++ data/CVE/list	2011-11-30 21:14:24 UTC (rev 17720)
@@ -1,3 +1,11 @@
+CVE-2011-4641
+	RESERVED
+CVE-2011-4640
+	RESERVED
+CVE-2011-4639
+	RESERVED
+CVE-2011-4638
+	RESERVED
 CVE-2011-4637
 	RESERVED
 CVE-2011-4636
@@ -199,8 +207,8 @@
 	RESERVED
 CVE-2011-4543
 	RESERVED
-CVE-2011-4542
-	RESERVED
+CVE-2011-4542 (Hastymail2 2.1.1 before RC2 allows remote attackers to execute ...)
+	TODO: check
 CVE-2011-4541 (Cross-site scripting (XSS) vulnerability in index.php in Hastymail2 ...)
 	TODO: check
 CVE-2011-4540
@@ -554,8 +562,8 @@
 	RESERVED
 CVE-2011-4406
 	RESERVED
-CVE-2011-4405
-	RESERVED
+CVE-2011-4405 (The cupshelpers scripts in system-config-printer in Ubuntu 11.04 and ...)
+	TODO: check
 CVE-2011-4404 (The default configuration of the HTTP server in Jetty in vSphere ...)
 	- jetty 6.1.19-1 (low; bug #528389)
 	NOTE: duplicate of CVE-2009-1523
@@ -706,8 +714,7 @@
 	- linux-2.6 <unfixed>
 CVE-2011-4346
 	RESERVED
-CVE-2011-4345
-	RESERVED
+CVE-2011-4345 (Cross-site scripting (XSS) vulnerability in Namazu before 2.0.21, when ...)
 	- namazu2 2.0.21-1 (low)
 	[squeeze] - namazu2 <no-dsa> (Minor issue)
 CVE-2011-4344
@@ -788,8 +795,7 @@
 	RESERVED
 	- dovecot <unfixed> (unimportant; bug #649511)
 	NOTE: Additional hardening
-CVE-2011-4317 [mod_proxy/mod_rewrite insufficient sanitization of invalid URLs]
-	RESERVED
+CVE-2011-4317 (The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, ...)
 	- apache2 <unfixed>
 	NOTE: Related to CVE-2011-3368 and CVE-2011-3639 but a different issue
 CVE-2011-4316
@@ -802,8 +808,7 @@
 	NOTE: http://trac.nginx.org/nginx/changeset/4268/nginx
 CVE-2011-4314
 	RESERVED
-CVE-2011-4313 [BIND INSIST crash in query.c]
-	RESERVED
+CVE-2011-4313 (query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, ...)
 	{DSA-2347-1}
 	- bind9 <unfixed> (high; bug #649099)
 	NOTE: http://www.isc.org/software/bind/advisories/cve-2011-4313
@@ -1262,8 +1267,8 @@
 	RESERVED
 CVE-2011-4192
 	RESERVED
-CVE-2011-4191
-	RESERVED
+CVE-2011-4191 (Stack-based buffer overflow in the xdrDecodeString function in ...)
+	TODO: check
 CVE-2011-4190
 	RESERVED
 CVE-2011-4189
@@ -1941,8 +1946,8 @@
 	NOT-FOR-US: Cisco Webex
 CVE-2011-4003
 	RESERVED
-CVE-2011-4002
-	RESERVED
+CVE-2011-4002 (HP no Mawashimono Nikki 6.6 and earlier allows remote attackers to ...)
+	TODO: check
 CVE-2011-4001
 	RESERVED
 CVE-2011-4000 (Buffer overflow in ChaSen 2.4.x allows remote attackers to execute ...)
@@ -2834,8 +2839,7 @@
 	[lenny] - chromium-browser <no-dsa> (attacker needs to get malicious file into cwd first)
 	[squeeze] - chromium-browser <no-dsa> (attacker needs to get malicious file into cwd first)
 	NOTE: http://seclists.org/fulldisclosure/2011/Oct/734
-CVE-2011-3639 [mod_proxy/mod_rewrite insufficient URI sanitization with HTTP/0.9 and pre 2.2.18]
-	RESERVED
+CVE-2011-3639 (The mod_proxy module in the Apache HTTP Server 2.0.x through 2.0.64 ...)
 	- apache2 2.2.18-1
 	NOTE: Related to CVE-2011-3368 and CVE-2011-4317 but a different issue
 CVE-2011-3638
@@ -3590,14 +3594,12 @@
 CVE-2011-3368 (The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, ...)
 	- apache2 2.2.21-2 (medium)
 	NOTE: http://article.gmane.org/gmane.comp.apache.announce/61
-CVE-2011-3367
-	RESERVED
-CVE-2011-3366
-	RESERVED
+CVE-2011-3367 (Arora, possibly 0.11 and other versions, does not use a certain font ...)
+	TODO: check
+CVE-2011-3366 (Rekonq 0.7.0 and earlier does not use a certain font when rendering ...)
 	- rekonq <not-affected> (Only affected the 0.8.x devel versions and was fixed before final 0.8 release, see bug #647298)
 	NOTE: http://www.kde.org/info/security/advisory-20111003-1.txt
-CVE-2011-3365
-	RESERVED
+CVE-2011-3365 (The KDE SSL Wrapper (KSSL) API in KDE SC 4.6.0 through 4.7.1, and ...)
 	- kde4libs <unfixed>
 	[squeeze] - kde4libs <not-affected> (only 4.6.0 - 4.7.1 are vulnerable)
 	[lenny] - kde4libs <not-affected> (only 4.6.0 - 4.7.1 are vulnerable)
@@ -4114,8 +4116,8 @@
 	RESERVED
 CVE-2011-3174
 	RESERVED
-CVE-2011-3173
-	RESERVED
+CVE-2011-3173 (Stack-based buffer overflow in the GetDriverSettings function in ...)
+	TODO: check
 CVE-2011-3172
 	RESERVED
 CVE-2011-3171 (Directory traversal vulnerability in pure-FTPd 1.0.22 and possibly ...)
@@ -4196,8 +4198,8 @@
 	- update-manager <unfixed> (bug #650307)
 CVE-2011-3151
 	RESERVED
-CVE-2011-3150
-	RESERVED
+CVE-2011-3150 (Software Center in Ubuntu 11.10, 11.04 10.10 does not properly ...)
+	TODO: check
 CVE-2011-3149
 	RESERVED
 	{DSA-2326-1}
@@ -13726,8 +13728,7 @@
 	RESERVED
 CVE-2009-5029
 	RESERVED
-CVE-2009-5028
-	RESERVED
+CVE-2009-5028 (Stack-based buffer overflow in Namazu before 2.0.20 allows remote ...)
 	- namazu2 2.0.20-1.0 (low)
 CVE-2009-5027
 	RESERVED


