[Secure-testing-commits] r19775 - data/CVE
Joey Hess
joeyh at alioth.debian.org
Fri Jul 20 21:14:19 UTC 2012
Author: joeyh
Date: 2012-07-20 21:14:19 +0000 (Fri, 20 Jul 2012)
New Revision: 19775
Modified:
data/CVE/list
Log:
automatic update
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2012-07-20 13:54:42 UTC (rev 19774)
+++ data/CVE/list 2012-07-20 21:14:19 UTC (rev 19775)
@@ -1,12 +1,22 @@
-CVE-2012-4028
+CVE-2012-4033 (Multiple unspecified vulnerabilities in the Zingiri Web Shop plugin ...)
+ TODO: check
+CVE-2012-4032 (Open redirect vulnerability in the login page in WebsitePanel before ...)
+ TODO: check
+CVE-2012-4031 (Multiple directory traversal vulnerabilities in src/acloglogin.php in ...)
+ TODO: check
+CVE-2012-4030
+ RESERVED
+CVE-2012-4029
+ RESERVED
+CVE-2012-4028 (Tridium Niagara AX Framework does not properly store credential data, ...)
NOT-FOR-US: Tridium Niagara AX Framework
-CVE-2012-4027
+CVE-2012-4027 (Directory traversal vulnerability in Tridium Niagara AX Framework ...)
NOT-FOR-US: Tridium Niagara AX Framework
-CVE-2012-4026
+CVE-2012-4026 (The Johnson Controls Pegasys P2000 server with software before 3.11 ...)
NOT-FOR-US: The Johnson Controls Pegasys P2000
-CVE-2012-4025
+CVE-2012-4025 (Integer overflow in the queue_init function in unsquashfs.c in ...)
TODO: check
-CVE-2012-4024
+CVE-2012-4024 (Stack-based buffer overflow in the get_component function in ...)
TODO: check
CVE-2012-4023
RESERVED
@@ -1455,8 +1465,7 @@
NOT-FOR-US: Cyberoam DPI devices
NOTE: https://blog.torproject.org/blog/security-vulnerability-found-cyberoam-dpi-devices-cve-2012-3372
NOTE: http://seclists.org/bugtraq/2012/Jul/20
-CVE-2012-3371 [OpenStack Scheduler denial of service through scheduler_hints]
- RESERVED
+CVE-2012-3371 (The Nova scheduler in OpenStack Compute (Nova) Folsom (2012.2) and ...)
- nova 2012.1.1-5 (bug #681301)
NOTE: http://www.openwall.com/lists/oss-security/2012/07/11/13
NOTE: https://github.com/openstack/nova/commit/034762e8060dcf0a11cb039b9d426b0d0bb1801d
@@ -1477,8 +1486,8 @@
CVE-2012-3366 (The Trigger plugin in bcfg2 1.2.x before 1.2.3 allows remote attackers ...)
{DSA-2503-1}
- bcfg2 1.2.2-2 (bug #679272)
-CVE-2012-3365
- RESERVED
+CVE-2012-3365 (The SQLite functionality in PHP before 5.3.15 allows remote attackers ...)
+ TODO: check
CVE-2012-3364
RESERVED
- linux <unfixed>
@@ -1500,8 +1509,7 @@
- nova 2012.1.1-2 (bug #680110)
CVE-2012-3359
RESERVED
-CVE-2012-3358 [Openjpeg: heap-buffer overflow when processing JPEG2000 image files]
- RESERVED
+CVE-2012-3358 (Multiple heap-based buffer overflows in the j2k_read_sot function in ...)
- openjpeg 1.3+dfsg-4.4 (bug #681075)
NOTE: http://www.openwall.com/lists/oss-security/2012/07/11/1
NOTE: Upstream patch: http://code.google.com/p/openjpeg/source/detail?r=1727
@@ -1519,8 +1527,7 @@
RESERVED
- viewvc <unfixed> (bug #679069)
NOTE: http://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2758
-CVE-2012-3355 [rhythmbox insecure temporary directory used by loading template files]
- RESERVED
+CVE-2012-3355 ((1) AlbumTab.py, (2) ArtistTab.py, (3) LinksTab.py, and (4) ...)
- rhythmbox <unfixed> (bug #616673)
NOTE: Upstream bug report https://bugzilla.gnome.org/show_bug.cgi?id=678661
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=835076
@@ -1759,10 +1766,10 @@
RESERVED
CVE-2012-3242
RESERVED
-CVE-2012-3241
- RESERVED
-CVE-2012-3240
- RESERVED
+CVE-2012-3241 (The VMware Broker in Eucalyptus 2.0.3 and 3.0.x before 3.0.2 does not ...)
+ TODO: check
+CVE-2012-3240 (The Walrus service in Eucalyptus 2.0.3 and 3.0.x before 3.0.2 allows ...)
+ TODO: check
CVE-2012-3239
RESERVED
CVE-2012-3238 (Cross-site scripting (XSS) vulnerability in the Backup/Restore ...)
@@ -1972,66 +1979,66 @@
RESERVED
CVE-2012-3136
RESERVED
-CVE-2012-3135
- RESERVED
-CVE-2012-3134
- RESERVED
+CVE-2012-3135 (Unspecified vulnerability in the Oracle JRockit component in Oracle ...)
+ TODO: check
+CVE-2012-3134 (Unspecified vulnerability in the Core RDBMS component in Oracle ...)
+ TODO: check
CVE-2012-3133
RESERVED
CVE-2012-3132
RESERVED
-CVE-2012-3131
- RESERVED
-CVE-2012-3130
- RESERVED
-CVE-2012-3129
- RESERVED
-CVE-2012-3128
- RESERVED
-CVE-2012-3127
- RESERVED
-CVE-2012-3126
- RESERVED
-CVE-2012-3125
- RESERVED
-CVE-2012-3124
- RESERVED
-CVE-2012-3123
- RESERVED
-CVE-2012-3122
- RESERVED
-CVE-2012-3121
- RESERVED
-CVE-2012-3120
- RESERVED
-CVE-2012-3119
- RESERVED
-CVE-2012-3118
- RESERVED
-CVE-2012-3117
- RESERVED
-CVE-2012-3116
- RESERVED
-CVE-2012-3115
- RESERVED
-CVE-2012-3114
- RESERVED
-CVE-2012-3113
- RESERVED
-CVE-2012-3112
- RESERVED
-CVE-2012-3111
- RESERVED
-CVE-2012-3110
- RESERVED
-CVE-2012-3109
- RESERVED
-CVE-2012-3108
- RESERVED
-CVE-2012-3107
- RESERVED
-CVE-2012-3106
- RESERVED
+CVE-2012-3131 (Unspecified vulnerability in Oracle Sun Solaris 9, 10, and 11 allows ...)
+ TODO: check
+CVE-2012-3130 (Unspecified vulnerability in Oracle Sun Solaris 11 allows remote ...)
+ TODO: check
+CVE-2012-3129 (Unspecified vulnerability in Oracle Sun Solaris 10 allows remote ...)
+ TODO: check
+CVE-2012-3128 (Unspecified vulnerability in Oracle SPARC T-Series Servers running ...)
+ TODO: check
+CVE-2012-3127 (Unspecified vulnerability in Oracle Sun Solaris 10 allows remote ...)
+ TODO: check
+CVE-2012-3126 (Unspecified vulnerability in the Solaris Cluster component in Oracle ...)
+ TODO: check
+CVE-2012-3125 (Unspecified vulnerability in Oracle Sun Solaris 8, 9, and 10 allows ...)
+ TODO: check
+CVE-2012-3124 (Unspecified vulnerability in Oracle Sun Solaris 10 allows remote ...)
+ TODO: check
+CVE-2012-3123 (Unspecified vulnerability in Oracle Sun Solaris 10 allows remote ...)
+ TODO: check
+CVE-2012-3122 (Unspecified vulnerability in Oracle Sun Solaris 8 and 9 allows local ...)
+ TODO: check
+CVE-2012-3121 (Unspecified vulnerability in Oracle Sun Solaris 9 and 10 allows remote ...)
+ TODO: check
+CVE-2012-3120 (Unspecified vulnerability in Oracle Sun Solaris 8 allows remote ...)
+ TODO: check
+CVE-2012-3119 (Unspecified vulnerability in the PeopleSoft Enterprise HRMS component ...)
+ TODO: check
+CVE-2012-3118 (Unspecified vulnerability in the PeoleSoft Enterprise PeopleTools ...)
+ TODO: check
+CVE-2012-3117 (Unspecified vulnerability in the Oracle Transportation Management ...)
+ TODO: check
+CVE-2012-3116 (Unspecified vulnerability in the Oracle Transportation Management ...)
+ TODO: check
+CVE-2012-3115 (Unspecified vulnerability in the Oracle MapViewer component in Oracle ...)
+ TODO: check
+CVE-2012-3114 (Unspecified vulnerability in the Oracle Transportation Management ...)
+ TODO: check
+CVE-2012-3113 (Unspecified vulnerability in the PeopleSoft Enterprise HRMS component ...)
+ TODO: check
+CVE-2012-3112 (Unspecified vulnerability in Oracle Sun Solaris 10 allows remote ...)
+ TODO: check
+CVE-2012-3111 (Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools ...)
+ TODO: check
+CVE-2012-3110 (Unspecified vulnerability in the Oracle Outside In Technology ...)
+ TODO: check
+CVE-2012-3109 (Unspecified vulnerability in the Oracle Outside In Technology ...)
+ TODO: check
+CVE-2012-3108 (Unspecified vulnerability in the Oracle Outside In Technology ...)
+ TODO: check
+CVE-2012-3107 (Unspecified vulnerability in the Oracle Outside In Technology ...)
+ TODO: check
+CVE-2012-3106 (Unspecified vulnerability in the Oracle Outside In Technology ...)
+ TODO: check
CVE-2012-3105 (The glBufferData function in the WebGL implementation in Mozilla ...)
- iceweasel 10.0.5esr-1
CVE-2012-3104
@@ -2230,8 +2237,8 @@
RESERVED
CVE-2012-3009
RESERVED
-CVE-2012-3008
- RESERVED
+CVE-2012-3008 (Stack-based buffer overflow in OSIsoft PI OPC DA Interface before ...)
+ TODO: check
CVE-2012-3007 (Stack-based buffer overflow in slssvc.exe before 58.x in Invensys ...)
NOT-FOR-US: Not in Debian
CVE-2012-3006 (The Innominate mGuard Smart HW before HW-101130 and BD before ...)
@@ -2299,8 +2306,8 @@
RESERVED
CVE-2012-2975
RESERVED
-CVE-2012-2974
- RESERVED
+CVE-2012-2974 (The web interface on the SMC SMC8024L2 switch allows remote attackers ...)
+ TODO: check
CVE-2012-2973
RESERVED
CVE-2012-2972
@@ -2337,8 +2344,8 @@
RESERVED
CVE-2012-2956
RESERVED
-CVE-2012-2955
- RESERVED
+CVE-2012-2955 (Multiple cross-site scripting (XSS) vulnerabilities in the ...)
+ TODO: check
CVE-2012-2954
RESERVED
CVE-2012-2953
@@ -2956,8 +2963,8 @@
NOTE: http://www.openwall.com/lists/oss-security/2012/06/11/5
CVE-2012-2689
RESERVED
-CVE-2012-2688
- RESERVED
+CVE-2012-2688 (Unspecified vulnerability in the _php_stream_scandir function in the ...)
+ TODO: check
CVE-2012-2687 [apache mod_negotiation XSS]
RESERVED
- apache2 2.2.22-8 (low)
@@ -3054,8 +3061,7 @@
CVE-2012-2656 [XXE vulnerability in Restlet]
RESERVED
- restlet <itp> (bug #596472)
-CVE-2012-2655
- RESERVED
+CVE-2012-2655 (PostgreSQL 8.3.x before 8.3.19, 8.4.x before 8.4.12, 9.0.x before ...)
{DSA-2491-1}
- postgresql-9.1 9.1.4-1
- postgresql-8.4 8.4.12-1
@@ -3080,8 +3086,7 @@
RESERVED
CVE-2012-2646
RESERVED
-CVE-2012-2645
- RESERVED
+CVE-2012-2645 (The Yahoo! Japan Yahoo! Browser application 1.2.0 and earlier for ...)
NOT-FOR-US: The Yahoo! Japan Yahoo! Browser application
CVE-2012-2644 (Cross-site scripting (XSS) vulnerability in the MT4i plugin 3.1 beta 4 ...)
NOT-FOR-US: Movable Type MT4i plugin
@@ -3163,8 +3168,7 @@
RESERVED
CVE-2012-2608
RESERVED
-CVE-2012-2607
- RESERVED
+CVE-2012-2607 (The Johnson Controls CK721-A controller with firmware before ...)
NOT-FOR-US: The Johnson Controls CK721-A
CVE-2012-2606 (The agent in Bradford Network Sentry before 5.3.3 does not require ...)
NOT-FOR-US: Bradford Network Sentry
@@ -4035,8 +4039,7 @@
CVE-2012-2304 [Drupal SA-CONTRIB-2012-067 - Linkit - Access bypass]
RESERVED
NOT-FOR-US: Drupal addon not packaged
-CVE-2012-2303 [Drupal SA-CONTRIB-2012-066 - Spaces and Spaces OG - Access ...]
- RESERVED
+CVE-2012-2303 (The Spaces module 6.x-3.x before 6.x-3.4 for Drupal does not enforce ...)
NOT-FOR-US: Drupal addon not packaged
CVE-2012-2302 [Drupal SA-CONTRIB-2012-065 - Sitedoc - Information disclosure]
RESERVED
@@ -4085,20 +4088,16 @@
RESERVED
CVE-2012-2283
RESERVED
-CVE-2012-2282
- RESERVED
+CVE-2012-2282 (EMC Celerra Network Server 6.x before 6.0.61.0, VNX 7.x before ...)
NOT-FOR-US: EMC Celerra/VNX/VNXe
CVE-2012-2281 (EMC RSA Access Manager Server 6.x before 6.1 SP4 and RSA Access ...)
NOT-FOR-US: RSA Access Manager
NOTE: http://seclists.org/bugtraq/2012/Jul/36
-CVE-2012-2280
- RESERVED
+CVE-2012-2280 (EMC RSA Authentication Manager 7.1 before SP4 P14 and RSA SecurID ...)
NOT-FOR-US: RSA Authentication Agent
-CVE-2012-2279
- RESERVED
+CVE-2012-2279 (Open redirect vulnerability in the Security Console in EMC RSA ...)
NOT-FOR-US: RSA Authentication Agent
-CVE-2012-2278
- RESERVED
+CVE-2012-2278 (Multiple cross-site scripting (XSS) vulnerabilities in the (1) ...)
NOT-FOR-US: RSA Authentication Agent
CVE-2012-2277 (The IRM Server in EMC Documentum Information Rights Management 4.x ...)
NOT-FOR-US: EMC Documentum Information Rights Management
@@ -4413,11 +4412,9 @@
RESERVED
- net-snmp 5.4.3~dfsg-2.5 (bug #672492)
NOTE: Red Hat patch: https://bugzilla.redhat.com/attachment.cgi?id=580443&action=diff
-CVE-2012-2140
- RESERVED
+CVE-2012-2140 (The Mail gem before 2.4.3 for Ruby allows remote attackers to execute ...)
- ruby-mail 2.4.4-1
-CVE-2012-2139
- RESERVED
+CVE-2012-2139 (Directory traversal vulnerability in ...)
- ruby-mail 2.4.4-1
CVE-2012-2138 (The @CopyFrom operation in the POST servlet in the ...)
NOT-FOR-US: Apache Sling
@@ -4769,8 +4766,7 @@
NOT-FOR-US: Adobe Illustrator
CVE-2012-2022
RESERVED
-CVE-2012-2021
- RESERVED
+CVE-2012-2021 (Multiple cross-site scripting (XSS) vulnerabilities in HP AssetManager ...)
NOT-FOR-US: HP AssetManager
CVE-2012-2020 (Unspecified vulnerability in HP Operations Agent before 11.03.12 ...)
NOT-FOR-US: HP Operations Agent
@@ -4888,97 +4884,78 @@
RESERVED
CVE-2012-1968
RESERVED
-CVE-2012-1967
- RESERVED
+CVE-2012-1967 (Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, ...)
{DSA-2514-1 DSA-2513-1}
- iceweasel 10.0.6esr-1
- icedove <unfixed>
- iceape <unfixed>
-CVE-2012-1966
- RESERVED
+CVE-2012-1966 (Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do ...)
{DSA-2514-1}
- iceweasel 10.0.6esr-1
-CVE-2012-1965
- RESERVED
+CVE-2012-1965 (Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do ...)
- iceweasel 10.0.6esr-1
-CVE-2012-1964
- RESERVED
+CVE-2012-1964 (The certificate-warning functionality in ...)
- iceweasel 10.0.6esr-1
- icedove <unfixed>
- iceape <unfixed>
-CVE-2012-1963
- RESERVED
+CVE-2012-1963 (The Content Security Policy (CSP) functionality in Mozilla Firefox 4.x ...)
- iceweasel 10.0.6esr-1
[squeeze] - iceweasel <not-affected> (CSP not yet available)
- icedove 10.0.5-1
[squeeze] - icedove <not-affected> (CSP not yet available)
- icedove <unfixed>
- iceape <unfixed>
-CVE-2012-1962
- RESERVED
+CVE-2012-1962 (Use-after-free vulnerability in the JSDependentString::undepend ...)
- iceweasel 10.0.6esr-1
- icedove <unfixed>
- iceape <unfixed>
-CVE-2012-1961
- RESERVED
+CVE-2012-1961 (Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, ...)
- iceweasel 10.0.6esr-1
- icedove <unfixed>
- iceape <unfixed>
-CVE-2012-1960
- RESERVED
+CVE-2012-1960 (The qcms_transform_data_rgb_out_lut_sse2 function in the QCMS ...)
- iceweasel <not-affected> (Only affects Firefox > 10)
-CVE-2012-1959
- RESERVED
+CVE-2012-1959 (Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, ...)
- iceweasel 10.0.6esr-1
- icedove <unfixed>
- iceape <unfixed>
-CVE-2012-1958
- RESERVED
+CVE-2012-1958 (Use-after-free vulnerability in the nsGlobalWindow::PageHidden ...)
- iceweasel 10.0.6esr-1
- icedove <unfixed>
- iceape <unfixed>
-CVE-2012-1957
- RESERVED
+CVE-2012-1957 (An unspecified parser-utility class in Mozilla Firefox 4.x through ...)
- iceweasel 10.0.6esr-1
- icedove <unfixed>
- iceape <unfixed>
CVE-2012-1956
RESERVED
-CVE-2012-1955
- RESERVED
+CVE-2012-1955 (Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, ...)
- iceweasel 10.0.6esr-1
- icedove <unfixed>
- iceape <unfixed>
-CVE-2012-1954
- RESERVED
+CVE-2012-1954 (Use-after-free vulnerability in the nsDocument::AdoptNode function in ...)
{DSA-2514-1 DSA-2513-1}
- iceweasel 10.0.6esr-1
- icedove <unfixed>
- iceape <unfixed>
-CVE-2012-1953
- RESERVED
+CVE-2012-1953 (The ElementAnimations::EnsureStyleRuleFor function in Mozilla Firefox ...)
- iceweasel 10.0.6esr-1
- icedove <unfixed>
- iceape <unfixed>
-CVE-2012-1952
- RESERVED
+CVE-2012-1952 (The nsTableFrame::InsertFrames function in Mozilla Firefox 4.x through ...)
- iceweasel 10.0.6esr-1
- icedove <unfixed>
- iceape <unfixed>
-CVE-2012-1951
- RESERVED
+CVE-2012-1951 (Use-after-free vulnerability in the nsSMILTimeValueSpec::IsEventBased ...)
- iceweasel 10.0.6esr-1
- icedove <unfixed>
- iceape <unfixed>
-CVE-2012-1950
- RESERVED
+CVE-2012-1950 (The drag-and-drop implementation in Mozilla Firefox 4.x through 13.0 ...)
{DSA-2514-1}
- iceweasel 10.0.6esr-1
-CVE-2012-1949
- RESERVED
+CVE-2012-1949 (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...)
- iceweasel <not-affected> (Only affects Firefox 13)
-CVE-2012-1948
- RESERVED
+CVE-2012-1948 (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...)
{DSA-2514-1 DSA-2513-1}
- iceweasel 10.0.6esr-1
- icedove <unfixed>
@@ -5375,108 +5352,104 @@
NOT-FOR-US: WebGlimpse
CVE-2012-1774 (Unspecified vulnerability in the Open URL feature in Gretech GOM Media ...)
NOT-FOR-US: Gretech GOM Media Player
-CVE-2012-1773
- RESERVED
-CVE-2012-1772
- RESERVED
-CVE-2012-1771
- RESERVED
-CVE-2012-1770
- RESERVED
-CVE-2012-1769
- RESERVED
-CVE-2012-1768
- RESERVED
-CVE-2012-1767
- RESERVED
-CVE-2012-1766
- RESERVED
-CVE-2012-1765
- RESERVED
-CVE-2012-1764
- RESERVED
+CVE-2012-1773 (Unspecified vulnerability in the Oracle Outside In Technology ...)
+ TODO: check
+CVE-2012-1772 (Unspecified vulnerability in the Oracle Outside In Technology ...)
+ TODO: check
+CVE-2012-1771 (Unspecified vulnerability in the Oracle Outside In Technology ...)
+ TODO: check
+CVE-2012-1770 (Unspecified vulnerability in the Oracle Outside In Technology ...)
+ TODO: check
+CVE-2012-1769 (Unspecified vulnerability in the Oracle Outside In Technology ...)
+ TODO: check
+CVE-2012-1768 (Unspecified vulnerability in the Oracle Outside In Technology ...)
+ TODO: check
+CVE-2012-1767 (Unspecified vulnerability in the Oracle Outside In Technology ...)
+ TODO: check
+CVE-2012-1766 (Unspecified vulnerability in the Oracle Outside In Technology ...)
+ TODO: check
+CVE-2012-1765 (Unspecified vulnerability in Oracle Sun Solaris 10 allows local users ...)
+ TODO: check
+CVE-2012-1764 (Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools ...)
+ TODO: check
CVE-2012-1763
RESERVED
-CVE-2012-1762
- RESERVED
-CVE-2012-1761
- RESERVED
-CVE-2012-1760
- RESERVED
-CVE-2012-1759
- RESERVED
-CVE-2012-1758
- RESERVED
-CVE-2012-1757
- RESERVED
+CVE-2012-1762 (Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools ...)
+ TODO: check
+CVE-2012-1761 (Unspecified vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 allows ...)
+ TODO: check
+CVE-2012-1760 (Unspecified vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 allows ...)
+ TODO: check
+CVE-2012-1759 (Unspecified vulnerability in the Oracle AutoVue component in Oracle ...)
+ TODO: check
+CVE-2012-1758 (Unspecified vulnerability in the Oracle AutoVue component in Oracle ...)
+ TODO: check
+CVE-2012-1757 (Unspecified vulnerability in Oracle MySQL Server 5.5.23 and earlier ...)
- mysql-5.1 <not-affected> (Only affects 5.5)
- mysql-5.5 <unfixed> (bug #682210)
-CVE-2012-1756
- RESERVED
+CVE-2012-1756 (Unspecified vulnerability in Oracle MySQL Server 5.5.23 and earlier ...)
- mysql-5.1 <not-affected> (Only affects 5.5)
- mysql-5.5 <unfixed> (bug #682210)
CVE-2012-1755
RESERVED
-CVE-2012-1754
- RESERVED
-CVE-2012-1753
- RESERVED
-CVE-2012-1752
- RESERVED
+CVE-2012-1754 (Unspecified vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 allows ...)
+ TODO: check
+CVE-2012-1753 (Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools ...)
+ TODO: check
+CVE-2012-1752 (Unspecified vulnerability in Oracle Sun Solaris 11 allows local users ...)
+ TODO: check
CVE-2012-1751
RESERVED
-CVE-2012-1750
- RESERVED
-CVE-2012-1749
- RESERVED
-CVE-2012-1748
- RESERVED
-CVE-2012-1747
- RESERVED
-CVE-2012-1746
- RESERVED
-CVE-2012-1745
- RESERVED
-CVE-2012-1744
- RESERVED
-CVE-2012-1743
- RESERVED
-CVE-2012-1742
- RESERVED
-CVE-2012-1741
- RESERVED
-CVE-2012-1740
- RESERVED
-CVE-2012-1739
- RESERVED
-CVE-2012-1738
- RESERVED
-CVE-2012-1737
- RESERVED
-CVE-2012-1736
- RESERVED
-CVE-2012-1735
- RESERVED
+CVE-2012-1750 (Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 ...)
+ TODO: check
+CVE-2012-1749 (Unspecified vulnerability in the Oracle MapViewer component in Oracle ...)
+ TODO: check
+CVE-2012-1748 (Unspecified vulnerability in the PeopleSoft Enterprise HRMS component ...)
+ TODO: check
+CVE-2012-1747 (Unspecified vulnerability in the Network Layer component in Oracle ...)
+ TODO: check
+CVE-2012-1746 (Unspecified vulnerability in the Network Layer component in Oracle ...)
+ TODO: check
+CVE-2012-1745 (Unspecified vulnerability in the Network Layer component in Oracle ...)
+ TODO: check
+CVE-2012-1744 (Unspecified vulnerability in the Oracle Outside In Technology ...)
+ TODO: check
+CVE-2012-1743 (Unspecified vulnerability in the Oracle Clinical Remote Data Capture ...)
+ TODO: check
+CVE-2012-1742 (Unspecified vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 allows ...)
+ TODO: check
+CVE-2012-1741 (Unspecified vulnerability in the Enterprise Manager for Fusion ...)
+ TODO: check
+CVE-2012-1740 (Unspecified vulnerability in the Oracle Application Express Listener ...)
+ TODO: check
+CVE-2012-1739 (Unspecified vulnerability in the Oracle E-Business Intelligence ...)
+ TODO: check
+CVE-2012-1738 (Unspecified vulnerability in the Oracle iPlanet Web Server component ...)
+ TODO: check
+CVE-2012-1737 (Unspecified vulnerability in the Enterprise Manager for Oracle ...)
+ TODO: check
+CVE-2012-1736 (Unspecified vulnerability in the Oracle MapViewer component in Oracle ...)
+ TODO: check
+CVE-2012-1735 (Unspecified vulnerability in Oracle MySQL Server 5.5.23 and earlier ...)
- mysql-5.1 <not-affected> (Only affects 5.5)
- mysql-5.5 <unfixed> (bug #682210)
-CVE-2012-1734
- RESERVED
+CVE-2012-1734 (Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier, ...)
- mysql-5.1 <removed> (bug #682212)
- mysql-5.5 <unfixed> (bug #682210)
-CVE-2012-1733
- RESERVED
-CVE-2012-1732
- RESERVED
-CVE-2012-1731
- RESERVED
-CVE-2012-1730
- RESERVED
-CVE-2012-1729
- RESERVED
-CVE-2012-1728
- RESERVED
-CVE-2012-1727
- RESERVED
+CVE-2012-1733 (Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools ...)
+ TODO: check
+CVE-2012-1732 (Unspecified vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 allows ...)
+ TODO: check
+CVE-2012-1731 (Unspecified vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 allows ...)
+ TODO: check
+CVE-2012-1730 (Unspecified vulnerability in the Oracle Application Object Library ...)
+ TODO: check
+CVE-2012-1729 (Unspecified vulnerability in the Hyperion BI+ component in Oracle ...)
+ TODO: check
+CVE-2012-1728 (Unspecified vulnerability in the Oracle Siebel CRM 8.1.1 and 8.2.2 ...)
+ TODO: check
+CVE-2012-1727 (Unspecified vulnerability in the Oracle Application Object Library ...)
+ TODO: check
CVE-2012-1726 (Unspecified vulnerability in the Java Runtime Environment (JRE) ...)
- openjdk-7 7~u3-2.1.1-1 (bug #677486)
CVE-2012-1725 (Unspecified vulnerability in the Java Runtime Environment (JRE) ...)
@@ -5516,8 +5489,8 @@
{DSA-2507-1}
- openjdk-6 6b24-1.11.3-1 (bug #677487)
- openjdk-7 7~u3-2.1.1-1 (bug #677486)
-CVE-2012-1715
- RESERVED
+CVE-2012-1715 (Unspecified vulnerability in the Oracle Application Object Library ...)
+ TODO: check
CVE-2012-1714
RESERVED
CVE-2012-1713 (Unspecified vulnerability in the Java Runtime Environment (JRE) ...)
@@ -5576,16 +5549,15 @@
{DSA-2496-1}
- mysql-5.1 5.1.62-1 (bug #670636)
- mysql-5.5 5.5.23-1
-CVE-2012-1689
- RESERVED
+CVE-2012-1689 (Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier, ...)
- mysql-5.1 <removed> (bug #682212)
- mysql-5.5 <unfixed> (bug #682210)
CVE-2012-1688 (Unspecified vulnerability in the MySQL Server component in Oracle ...)
{DSA-2496-1}
- mysql-5.1 5.1.62-1 (bug #670636)
- mysql-5.5 5.5.23-1
-CVE-2012-1687
- RESERVED
+CVE-2012-1687 (Unspecified vulnerability in Oracle Solaris 10 and 11 allows local ...)
+ TODO: check
CVE-2012-1686
RESERVED
CVE-2012-1685
@@ -5895,8 +5867,7 @@
CVE-2012-1572
RESERVED
- keystone 2012.1~rc2-1
-CVE-2012-1571 [CDF crasher bugs in file, found by CERT/CC BFF tool]
- RESERVED
+CVE-2012-1571 (file before 5.11 and libmagic allow remote attackers to cause a denial ...)
{DSA-2422-1}
- file 5.11-1 (low; bug #664263)
[squeeze] - file 5.04-5+squeeze1
@@ -6054,7 +6025,7 @@
RESERVED
CVE-2012-1500
RESERVED
-CVE-2012-1499 (The JPEG 2000 codec in OpenJPEG before 1.5 does not properly allocate ...)
+CVE-2012-1499 (The JPEG 2000 codec (jp2.c) in OpenJPEG before 1.5 allows remote ...)
- openjpeg <not-affected> (vulnerable code introduced after 1.3)
CVE-2012-1498 (Multiple cross-site request forgery (CSRF) vulnerabilities in Webfolio ...)
NOT-FOR-US: Webfolio CMS
@@ -7562,18 +7533,15 @@
- samba 2:3.4.0~pre1-1
[lenny] - samba <not-affected> (pre-release issue)
[squeeze] - samba <not-affected> (pre-release issue)
-CVE-2012-0868
- RESERVED
+CVE-2012-0868 (CRLF injection vulnerability in pg_dump in PostgreSQL 8.3.x before ...)
{DSA-2418-1}
- postgresql-9.1 9.1.3-1
- postgresql-8.4 8.4.11-1
-CVE-2012-0867
- RESERVED
+CVE-2012-0867 (PostgreSQL 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before ...)
{DSA-2418-1}
- postgresql-9.1 9.1.3-1
- postgresql-8.4 8.4.11-1
-CVE-2012-0866
- RESERVED
+CVE-2012-0866 (CREATE TRIGGER in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, ...)
{DSA-2418-1}
- postgresql-9.1 9.1.3-1
- postgresql-8.4 8.4.11-1
@@ -7800,39 +7768,29 @@
NOT-FOR-US: Apache CXF
CVE-2012-0802 (Multiple buffer overflows in Spamdyke before 4.3.0 might allow remote ...)
NOT-FOR-US: spamdyke
-CVE-2012-0801 [MSA-12-0012: Form validation issue]
- RESERVED
+CVE-2012-0801 (lib/formslib.php in Moodle 2.1.x before 2.1.4 and 2.2.x before 2.2.1 ...)
- moodle <not-affected> (Only affects 2.x)
-CVE-2012-0800 [MSA-12-0011: Browser autofill password issue]
- RESERVED
+CVE-2012-0800 (The form-autocompletion functionality in Moodle 2.0.x before 2.0.7, ...)
- moodle <not-affected> (Only affects 2.x)
-CVE-2012-0799 [MSA-12-0010: Unauthorised access to session key]
- RESERVED
+CVE-2012-0799 (Moodle 2.0.x before 2.0.7 and 2.1.x before 2.1.4, when an anonymous ...)
- moodle <not-affected> (Only affects 2.x)
-CVE-2012-0798 [MSA-12-0009: Role access issue]
- RESERVED
+CVE-2012-0798 (The self-enrolment functionality in Moodle 2.1.x before 2.1.4 and ...)
- moodle <not-affected> (Only affects 2.x)
-CVE-2012-0797 [MSA-12-0008: Unsynchronised access via tokens]
- RESERVED
+CVE-2012-0797 (The webservices functionality in Moodle 2.0.x before 2.0.7, 2.1.x ...)
- moodle <not-affected> (Only affects 2.x)
-CVE-2012-0796 [MSA-12-0007: Email injection prevention]
- RESERVED
+CVE-2012-0796 (class.phpmailer.php in the PHPMailer library, as used in Moodle 1.9.x ...)
{DSA-2421-1}
- moodle 1.9.9.dfsg2-5
-CVE-2012-0795 [MSA-12-0006: Additional email address validation]
- RESERVED
+CVE-2012-0795 (Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, ...)
{DSA-2421-1}
- moodle 1.9.9.dfsg2-5
-CVE-2012-0794 [MSA-12-0005: Encryption enhancement]
- RESERVED
+CVE-2012-0794 (The rc4encrypt function in lib/moodlelib.php in Moodle 1.9.x before ...)
{DSA-2421-1}
- moodle 1.9.9.dfsg2-5
-CVE-2012-0793 [MSA-12-0004: Added profile image security]
- RESERVED
+CVE-2012-0793 (Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, ...)
{DSA-2421-1}
- moodle 1.9.9.dfsg2-5
-CVE-2012-0792 [MSA-12-0002: Personal information leak]
- RESERVED
+CVE-2012-0792 (mod/forum/user.php in Moodle 1.9.x before 1.9.16 allows remote ...)
{DSA-2421-1}
- moodle 1.9.9.dfsg2-5
CVE-2012-0791 (Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP ...)
@@ -8334,8 +8292,8 @@
NOT-FOR-US: Oracle Supply Chain Products Suite
CVE-2012-0564 (Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools ...)
NOT-FOR-US: Oracle PeopleSoft Products
-CVE-2012-0563
- RESERVED
+CVE-2012-0563 (Unspecified vulnerability in Oracle Solaris 9, 10, and 11 allows local ...)
+ TODO: check
CVE-2012-0562 (Unspecified vulnerability in the PeopleSoft Enterprise HRMS component ...)
NOT-FOR-US: Oracle PeopleSoft Products
CVE-2012-0561 (Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools ...)
@@ -8382,8 +8340,7 @@
NOT-FOR-US: Oracle E-Business Suite
CVE-2012-0541 (Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking ...)
NOT-FOR-US: Oracle Financial Services Software
-CVE-2012-0540
- RESERVED
+CVE-2012-0540 (Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier ...)
- mysql-5.1 <removed> (bug #682212)
- mysql-5.5 <unfixed> (bug #682210)
CVE-2012-0539 (Unspecified vulnerability in Oracle Sun Solaris 8, 9, and 10 allows ...)
@@ -9203,12 +9160,12 @@
NOT-FOR-US: Stoneware webNetwork
CVE-2012-0285 (Multiple cross-site scripting (XSS) vulnerabilities in Stoneware ...)
NOT-FOR-US: Stoneware webNetwork
-CVE-2012-0284
- RESERVED
-CVE-2012-0283
- RESERVED
-CVE-2012-0282
- RESERVED
+CVE-2012-0284 (Stack-based buffer overflow in the SetSource method in the Cisco ...)
+ TODO: check
+CVE-2012-0283 (Cross-site scripting (XSS) vulnerability in the tpl_mediaFileList ...)
+ TODO: check
+CVE-2012-0282 (Heap-based buffer overflow in XnView before 1.99 allows remote ...)
+ TODO: check
CVE-2012-0281
RESERVED
CVE-2012-0280
@@ -9217,10 +9174,10 @@
NOT-FOR-US: Quest (quest.com) Toad
CVE-2012-0278 (Heap-based buffer overflow in the FlashPix PlugIn before 4.3.4.0 for ...)
NOT-FOR-US: IrfanView
-CVE-2012-0277
- RESERVED
-CVE-2012-0276
- RESERVED
+CVE-2012-0277 (Heap-based buffer overflow in XnView before 1.99 allows remote ...)
+ TODO: check
+CVE-2012-0276 (Multiple heap-based buffer overflows in XnView before 1.99 allow ...)
+ TODO: check
CVE-2012-0275
RESERVED
CVE-2012-0274
@@ -11095,49 +11052,36 @@
- linux-2.6 3.1-1
[squeeze] - linux-2.6 <not-affected> (Introduced and fixed during 3.1 dev cycle)
[lenny] - linux-2.6 <not-affected> (Introduced and fixed during 3.1 dev cycle)
-CVE-2011-4593
- RESERVED
+CVE-2011-4593 (Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1.x before 2.1.3 ...)
- moodle <not-affected> (Only affects 2.x)
-CVE-2011-4592
- RESERVED
+CVE-2011-4592 (The command-line cron implementation in Moodle 2.0.x before 2.0.6 and ...)
- moodle <not-affected> (Only affects 2.x)
-CVE-2011-4591
- RESERVED
+CVE-2011-4591 (Cross-site scripting (XSS) vulnerability in the print_object function ...)
- moodle <not-affected> (Only affects 2.x)
-CVE-2011-4590
- RESERVED
+CVE-2011-4590 (The web services implementation in Moodle 2.0.x before 2.0.6 and 2.1.x ...)
- moodle <not-affected> (Only affects 2.x)
-CVE-2011-4589
- RESERVED
+CVE-2011-4589 (backup/moodle2/restore_stepslib.php in Moodle 2.0.x before 2.0.6 and ...)
- moodle <not-affected> (Only affects 2.x)
-CVE-2011-4588
- RESERVED
+CVE-2011-4588 (The ip_in_range function in mnet/lib.php in MNET in Moodle 1.9.x ...)
{DSA-2421-1}
- moodle 1.9.9.dfsg2-5 (bug #652235)
-CVE-2011-4587
- RESERVED
+CVE-2011-4587 (lib/moodlelib.php in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, ...)
{DSA-2421-1}
- moodle 1.9.9.dfsg2-5 (bug #652235)
-CVE-2011-4586
- RESERVED
+CVE-2011-4586 (CRLF injection vulnerability in calendar/set.php in the Calendar ...)
{DSA-2421-1}
- moodle 1.9.9.dfsg2-5 (bug #652235)
-CVE-2011-4585
- RESERVED
+CVE-2011-4585 (login/change_password.php in Moodle 1.9.x before 1.9.15 does not use ...)
{DSA-2421-1}
- moodle 1.9.9.dfsg2-5 (bug #652235)
-CVE-2011-4584
- RESERVED
+CVE-2011-4584 (The MNET authentication functionality in Moodle 1.9.x before 1.9.15, ...)
{DSA-2421-1}
- moodle 1.9.9.dfsg2-5 (bug #652235)
-CVE-2011-4583
- RESERVED
+CVE-2011-4583 (Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 displays web service ...)
- moodle <not-affected> (Only affects 2.x)
-CVE-2011-4582
- RESERVED
+CVE-2011-4582 (Open redirect vulnerability in the Calendar set page in Moodle 2.1.x ...)
- moodle <not-affected> (Only affects 2.x)
-CVE-2011-4581
- RESERVED
+CVE-2011-4581 (mod/wiki/pagelib.php in Moodle 2.0.x before 2.0.6 and 2.1.x before ...)
- moodle <not-affected> (Only affects 2.x)
CVE-2011-4580
RESERVED
@@ -11740,8 +11684,7 @@
CVE-2011-4359 [MyFaces - includeViewParameters re-evaluates param/model values as EL expressions]
REJECTED
NOT-FOR-US: Apache MyFaces
-CVE-2011-4358 [Mojarra - includeViewParameters re-evaluates param/model values as EL expressions]
- RESERVED
+CVE-2011-4358 (Unspecified vulnerability in Oracle GlassFish Enterprise Server 3.0.1 ...)
{DSA-2359-1}
- mojarra 2.0.3-2 (bug #650430)
CVE-2011-4357 (Format string vulnerability in the p_cgi_error function in ...)
@@ -11931,70 +11874,50 @@
- moodle <not-affected> (Only affects 2.x)
CVE-2011-4298 (Multiple cross-site request forgery (CSRF) vulnerabilities in ...)
- moodle <not-affected> (Only affects 2.x)
-CVE-2011-4297 [MSA-11-0023]
- RESERVED
+CVE-2011-4297 (comment/lib.php in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 ...)
- moodle <not-affected> (Only affects 2.x)
-CVE-2011-4296 [MSA-11-0022]
- RESERVED
+CVE-2011-4296 (lib/db/access.php in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 ...)
- moodle <not-affected> (Only affects 2.x)
-CVE-2011-4295 [MSA-11-0021]
- RESERVED
+CVE-2011-4295 (The moodle_enrol_external:role_assign function in ...)
- moodle <not-affected> (Only affects 2.x)
-CVE-2011-4294 [MSA-11-0020]
- RESERVED
+CVE-2011-4294 (The error-message functionality in Moodle 1.9.x before 1.9.13, 2.0.x ...)
{DSA-2338-1}
- moodle 1.9.9.dfsg2-4
-CVE-2011-4293 [MSA-11-0019]
- RESERVED
+CVE-2011-4293 (The theme implementation in Moodle 2.0.x before 2.0.4 and 2.1.x before ...)
- moodle <not-affected> (Only affects 2.x)
-CVE-2011-4292 [MSA-11-0017]
- RESERVED
+CVE-2011-4292 (Moodle 2.0.x before 2.0.3 allows remote authenticated users to cause a ...)
- moodle <not-affected> (Only affects 2.x)
-CVE-2011-4291 [MSA-11-0016]
- RESERVED
+CVE-2011-4291 (Moodle 2.0.x before 2.0.3 allows remote authenticated users to cause a ...)
- moodle <not-affected> (Only affects 2.x)
-CVE-2011-4290 [MSA-11-0015]
- RESERVED
+CVE-2011-4290 (Multiple cross-site scripting (XSS) vulnerabilities in lib/weblib.php ...)
{DSA-2262-1}
- moodle 1.9.9.dfsg2-3
-CVE-2011-4289 [MSA-11-0014]
- RESERVED
+CVE-2011-4289 (Moodle 2.0.x before 2.0.3 does not recognize the configuration setting ...)
- moodle <not-affected> (Only affects 2.x)
-CVE-2011-4288 [MSA-11-0013]
- RESERVED
+CVE-2011-4288 (Moodle 1.9.x before 1.9.12 and 2.0.x before 2.0.3 does not properly ...)
{DSA-2262-1}
- moodle 1.9.9.dfsg2-3
-CVE-2011-4287 [MSA-11-0012]
- RESERVED
+CVE-2011-4287 (admin/uploaduser_form.php in Moodle 2.0.x before 2.0.3 does not force ...)
- moodle <not-affected> (Only affects 2.x)
-CVE-2011-4286 [MSA-11-0011]
- RESERVED
+CVE-2011-4286 (Multiple cross-site scripting (XSS) vulnerabilities in the ...)
{DSA-2262-1}
- moodle 1.9.9.dfsg2-3
-CVE-2011-4285 [MSA-11-0010]
- RESERVED
+CVE-2011-4285 (The default configuration of Moodle 2.0.x before 2.0.2 has an ...)
- moodle <not-affected> (Only affects 2.x)
-CVE-2011-4284 [MSA-11-0009]
- RESERVED
+CVE-2011-4284 (Moodle 2.0.x before 2.0.2 allows remote attackers to obtain sensitive ...)
- moodle <not-affected> (Only affects 2.x)
-CVE-2011-4283 [MSA-11-0008]
- RESERVED
+CVE-2011-4283 (Moodle 1.9.x before 1.9.11 and 2.0.x before 2.0.2 places an IMS ...)
{DSA-2262-1}
- moodle 1.9.9.dfsg2-3
-CVE-2011-4282 [MSA-11-0007]
- RESERVED
+CVE-2011-4282 (Multiple cross-site scripting (XSS) vulnerabilities in the course-tags ...)
- moodle <not-affected> (Only affects 2.x)
-CVE-2011-4281 [MSA-11-0006]
- RESERVED
+CVE-2011-4281 (Multiple cross-site request forgery (CSRF) vulnerabilities in Moodle ...)
- moodle <not-affected> (Only affects 2.x)
-CVE-2011-4280 [MSA-11-0005]
- RESERVED
+CVE-2011-4280 (Cross-site scripting (XSS) vulnerability in the Spike PHPCoverage (aka ...)
- moodle <not-affected> (Only affects 2.x)
-CVE-2011-4279 [MSA-11-0004]
- RESERVED
+CVE-2011-4279 (Moodle 2.0.x before 2.0.2 does not use the forceloginforprofiles ...)
- moodle <not-affected> (Only affects 2.x)
-CVE-2011-4278 [MSA-11-0003]
- RESERVED
+CVE-2011-4278 (Cross-site scripting (XSS) vulnerability in the tag autocomplete ...)
{DSA-2262-1}
- moodle 1.9.9.dfsg2-3
CVE-2011-4277 (Cross-site scripting (XSS) vulnerability in CourseForum ProjectForum ...)
@@ -12471,8 +12394,7 @@
NOT-FOR-US: Flexera FlexNet Publisher
CVE-2011-4134 (Heap-based buffer overflow in lmadmin in Flexera FlexNet Publisher ...)
NOT-FOR-US: Flexera FlexNet Publisher
-CVE-2011-4133 [MSA-11-0002]
- RESERVED
+CVE-2011-4133 (Cross-site request forgery (CSRF) vulnerability in Moodle 1.9.x before ...)
{DSA-2262-1}
- moodle 1.9.9.dfsg2-3
CVE-2011-4132 (The cleanup_journal_tail function in the Journaling Block Device (JBD) ...)
@@ -14366,8 +14288,8 @@
{DSA-2420-1}
- openjdk-6 6b24-1.11.1-1
- openjdk-7 7~u3-2.1-1
-CVE-2011-3562
- RESERVED
+CVE-2011-3562 (Unspecified vulnerability in the Portal component in Oracle Fusion ...)
+ TODO: check
CVE-2011-3561 (Unspecified vulnerability in the Java Runtime Environment component in ...)
- sun-java6 <removed> (bug #645881)
[lenny] - sun-java6 <no-dsa> (Non-free not supported)
@@ -25293,8 +25215,7 @@
NOTE: https://www.modsecurity.org/fisheye/browse/modsecurity/m2/branches/2.5.x/apache2/msc_multipart.c?r2=1419&r1=1366
NOTE: http://www.openwall.com/lists/oss-security/2012/06/22/1
NOTE: http://www.openwall.com/lists/oss-security/2012/06/22/2
-CVE-2009-5030 [openjpg heap corruption]
- RESERVED
+CVE-2009-5030 (The tcd_free_encode function in tcd.c in OpenJPEG 1.3 through 1.5 ...)
- openjpeg 1.3+dfsg-4.1 (medium; bug #672455)
NOTE: Upstream ticket http://code.google.com/p/openjpeg/issues/detail?id=5
NOTE: CVE request http://www.openwall.com/lists/oss-security/2012/04/13/1
More information about the Secure-testing-commits
mailing list