[Secure-testing-commits] r18100 - data/CVE

Mon Jan 9 21:14:18 UTC 2012

Author: joeyh
Date: 2012-01-09 21:14:18 +0000 (Mon, 09 Jan 2012)
New Revision: 18100

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2012-01-09 19:15:08 UTC (rev 18099)
+++ data/CVE/list	2012-01-09 21:14:18 UTC (rev 18100)
@@ -1,3 +1,21 @@
+CVE-2012-0394 (** DISPUTED ** The DebuggingInterceptor component in Apache Struts ...)
+	TODO: check
+CVE-2012-0393 (The ParameterInterceptor component in Apache Struts before 2.3.1.1 ...)
+	TODO: check
+CVE-2012-0392 (The CookieInterceptor component in Apache Struts before 2.3.1.1 does ...)
+	TODO: check
+CVE-2012-0391 (The ExceptionDelegator component in Apache Struts before 2.2.3.1 ...)
+	TODO: check
+CVE-2011-5057 (Apache Struts 2.3.1.1 and earlier provides interfaces that do not ...)
+	TODO: check
+CVE-2011-5056 (The authoritative server in MaraDNS through 2.0.04 computes hash ...)
+	TODO: check
+CVE-2011-5055 (MaraDNS 1.3.07.12 and 1.4.08 computes hash values for DNS data without ...)
+	TODO: check
+CVE-2011-5054 (kcheckpass passes a user-supplied argument to the pam_start function, ...)
+	TODO: check
+CVE-2011-5053 (The Wi-Fi Protected Setup (WPS) protocol, when the "external ...)
+	TODO: check
 CVE-2011-XXXX [glib hashtable dos issues: ocert-2011-003]
 	- glib2.0 <unfixed> (low; bug #655044)
 CVE-2012-XXXX [znc bouncedcc DoS]
@@ -828,8 +846,8 @@
 	RESERVED
 CVE-2011-4871
 	RESERVED
-CVE-2011-4870
-	RESERVED
+CVE-2011-4870 (Multiple buffer overflows in the (1) GUIControls, (2) BatchObjSrv, and ...)
+	TODO: check
 CVE-2011-4869 (validator/val_nsec3.c in Unbound before 1.4.13p2 does not properly ...)
 	{DSA-2370-1}
 	- unbound 1.4.14-1 (medium)
@@ -1648,8 +1666,7 @@
 	REJECTED
 CVE-2012-0025
 	RESERVED
-CVE-2012-0024 [maradns dos]
-	RESERVED
+CVE-2012-0024 (MaraDNS before 1.3.07.12 and 1.4.x before 1.4.08 computes hash values ...)
 	- maradns 1.4.09-1
 	[squeeze] - maradns <no-dsa> (Minor issue)
 	[lenny] - maradns <no-dsa> (Minor issue)
@@ -2103,14 +2120,14 @@
 	RESERVED
 CVE-2011-4533
 	RESERVED
-CVE-2011-4532
-	RESERVED
-CVE-2011-4531
-	RESERVED
-CVE-2011-4530
-	RESERVED
-CVE-2011-4529
-	RESERVED
+CVE-2011-4532 (Absolute path traversal vulnerability in the ALMListView.ALMListCtrl ...)
+	TODO: check
+CVE-2011-4531 (Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 ...)
+	TODO: check
+CVE-2011-4530 (Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 does ...)
+	TODO: check
+CVE-2011-4529 (Multiple buffer overflows in Siemens Automation License Manager (ALM) ...)
+	TODO: check
 CVE-2011-4528 (Unbound before 1.4.13p2 attempts to free unallocated memory during ...)
 	{DSA-2370-1}
 	- unbound 1.4.14-1 (medium)
@@ -2544,13 +2561,11 @@
 	NOTE: http://openwall.com/lists/oss-security/2011/11/29/8
 	NOTE: http://redmine.lighttpd.net/issues/2370
 	NOTE: the announcement says that the debian package is not affected, but there are no additional patches that would cause different behavior (i.e. the base64_reverse_table is the same in debian and upstream), so if upstream is affected, so too is the debian package
-CVE-2011-4361 [lack of read permission checks]
-	RESERVED
+CVE-2011-4361 (MediaWiki before 1.17.1 does not check for read permission before ...)
 	{DSA-2366-1}
 	- mediawiki 1:1.15.5-4 (bug #650434)
 	NOTE: http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-November/000104.html
-CVE-2011-4360 [page titles on private wikis]
-	RESERVED
+CVE-2011-4360 (MediaWiki before 1.17.1 allows remote attackers to obtain the page ...)
 	{DSA-2366-1}
 	- mediawiki 1:1.15.5-4 (bug #650434)
 	NOTE: http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-November/000104.html
@@ -3537,10 +3552,10 @@
 	- phpmyadmin 4:3.4.6-1 (unimportant)
 CVE-2011-4057
 	RESERVED
-CVE-2011-4056
-	RESERVED
-CVE-2011-4055
-	RESERVED
+CVE-2011-4056 (An unspecified ActiveX control in ActBar.ocx in Siemens Tecnomatix ...)
+	TODO: check
+CVE-2011-4055 (Buffer overflow in the WebClient ActiveX control in Siemens Tecnomatix ...)
+	TODO: check
 CVE-2011-4054 (Cross-site scripting (XSS) vulnerability in login.fcc in CA SiteMinder ...)
 	NOT-FOR-US: CA SiteMinder
 CVE-2011-4053
@@ -4065,14 +4080,14 @@
 	RESERVED
 CVE-2011-3923
 	RESERVED
-CVE-2011-3922
-	RESERVED
-CVE-2011-3921
-	RESERVED
+CVE-2011-3922 (Stack-based buffer overflow in Google Chrome before 16.0.912.75 allows ...)
+	TODO: check
+CVE-2011-3921 (Use-after-free vulnerability in Google Chrome before 16.0.912.75 ...)
+	TODO: check
 CVE-2011-3920
 	RESERVED
-CVE-2011-3919
-	RESERVED
+CVE-2011-3919 (Heap-based buffer overflow in libxml2, as used in Google Chrome before ...)
+	TODO: check
 CVE-2011-3918
 	RESERVED
 CVE-2011-3917 (Stack-based buffer overflow in FileWatcher in Google Chrome before ...)
@@ -6077,8 +6092,8 @@
 	- openssl 1.0.0e-1
 	[squeeze] - openssl <not-affected> (only affects 1.0.0 through 1.0.0d)
 	[lenny] - openssl <not-affected> (only affects 1.0.0 through 1.0.0d)
-CVE-2011-3206
-	RESERVED
+CVE-2011-3206 (Multiple cross-site scripting (XSS) vulnerabilities in the ...)
+	TODO: check
 CVE-2011-3205 (Buffer overflow in the gopherToHTML function in gopher.cc in the ...)
 	{DSA-2304-1}
 	- squid3 3.1.15-1 (low; bug #639755)


