[Secure-testing-commits] r19191 - data/CVE

Joey Hess joeyh at alioth.debian.org
Wed May 9 21:14:34 UTC 2012


Author: joeyh
Date: 2012-05-09 21:14:33 +0000 (Wed, 09 May 2012)
New Revision: 19191

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2012-05-09 20:50:56 UTC (rev 19190)
+++ data/CVE/list	2012-05-09 21:14:33 UTC (rev 19191)
@@ -314,45 +314,45 @@
 	RESERVED
 CVE-2010-5096 [MyBB multiple SQL injection vulnerabilities]
 	RESERVED
-    NOT-FOR-US: MyBB
-    NOTE: http://osvdb.org/show/osvdb/70013
-    NOTE: http://yehg.net/lab/pr0js/advisories/%5Bmybb1.6%5D_sql_injection
+	NOT-FOR-US: MyBB
+	NOTE: http://osvdb.org/show/osvdb/70013
+	NOTE: http://yehg.net/lab/pr0js/advisories/%5Bmybb1.6%5D_sql_injection
 CVE-2010-5095 [SilverStripe escaping exploit]
 	RESERVED
-    - silverstripe <itp> (bug #528461)
-    NOTE: http://seclists.org/oss-sec/2012/q2/209
+	- silverstripe <itp> (bug #528461)
+	NOTE: http://seclists.org/oss-sec/2012/q2/209
 CVE-2010-5094 [SilverStripe unauthenticated remote removal of index.php under certain conditions]
 	RESERVED
-    - silverstripe <itp> (bug #528461)
-    NOTE: http://seclists.org/oss-sec/2012/q2/209
+	- silverstripe <itp> (bug #528461)
+	NOTE: http://seclists.org/oss-sec/2012/q2/209
 CVE-2010-5093 [SilverStripe privilege escalation exploit]
 	RESERVED
-    - silverstripe <itp> (bug #528461)
-    NOTE: http://seclists.org/oss-sec/2012/q2/209
+	- silverstripe <itp> (bug #528461)
+	NOTE: http://seclists.org/oss-sec/2012/q2/209
 CVE-2010-5092 [SilverStripe fixed password encryption when saving members through the "Add Member" dialog in the "Security" admin. The saving process was disregarding password encyrption and saving them as plaintext]
 	RESERVED
-    - silverstripe <itp> (bug #528461)
-    NOTE: http://seclists.org/oss-sec/2012/q2/209
+	- silverstripe <itp> (bug #528461)
+	NOTE: http://seclists.org/oss-sec/2012/q2/209
 CVE-2010-5091 [SilverStripe fixed a security issue where logged-in CMS authors were allowed to rename files with harmful extensions]
 	RESERVED
-    - silverstripe <itp> (bug #528461)
-    NOTE: http://seclists.org/oss-sec/2012/q2/209
+	- silverstripe <itp> (bug #528461)
+	NOTE: http://seclists.org/oss-sec/2012/q2/209
 CVE-2010-5090 [SilverStripe fixed a security issue where users with access to admin/security (but limited privileges) can take over a known administrator account by changing its password]
 	RESERVED
-    - silverstripe <itp> (bug #528461)
-    NOTE: http://seclists.org/oss-sec/2012/q2/209
+	- silverstripe <itp> (bug #528461)
+	NOTE: http://seclists.org/oss-sec/2012/q2/209
 CVE-2010-5089 [SilverStripe information disclosure]
 	RESERVED
-    - silverstripe <itp> (bug #528461)
-    NOTE: http://seclists.org/oss-sec/2012/q2/209
+	- silverstripe <itp> (bug #528461)
+	NOTE: http://seclists.org/oss-sec/2012/q2/209
 CVE-2010-5088 [SilverStripe CSRF]
 	RESERVED
-    - silverstripe <itp> (bug #528461)
-    NOTE: http://seclists.org/oss-sec/2012/q2/209
+	- silverstripe <itp> (bug #528461)
+	NOTE: http://seclists.org/oss-sec/2012/q2/209
 CVE-2010-5087 [SilverStripe CSRF protection bypassed when handling form action requests through controller]
 	RESERVED
-    - silverstripe <itp> (bug #528461)
-    NOTE: http://seclists.org/oss-sec/2012/q2/209
+	- silverstripe <itp> (bug #528461)
+	NOTE: http://seclists.org/oss-sec/2012/q2/209
 CVE-2012-2416 (chan_sip.c in the SIP channel driver in Asterisk Open Source 1.8.x ...)
 	- asterisk 1:1.8.11.1~dfsg-1 (bug #670180)
 	[squeeze] - asterisk <not-affected> (Vulnerable code not present)
@@ -496,16 +496,16 @@
 	RESERVED
 CVE-2012-2332 [SQL injection in serendipity before 1.7.1]
 	RESERVED
-    - serendipity <unfixed> (bug #671937; medium)
-    NOTE: http://www.koramis.com/advisories/2012/KORAMIS-ADV2012-001.txt
-    NOTE: http://blog.s9y.org/archives/240-Serendipity-1.6.1-released.html
-    NOTE: CVE id requested http://seclists.org/oss-sec/2012/q2/276
+	- serendipity <unfixed> (bug #671937; medium)
+	NOTE: http://www.koramis.com/advisories/2012/KORAMIS-ADV2012-001.txt
+	NOTE: http://blog.s9y.org/archives/240-Serendipity-1.6.1-released.html
+	NOTE: CVE id requested http://seclists.org/oss-sec/2012/q2/276
 CVE-2012-2331 [XSS in serendipity before 1.7.1]
 	RESERVED
-    - serendipity <unfixed> (bug #671937; medium)
-    NOTE: http://www.koramis.com/advisories/2012/KORAMIS-ADV2012-001.txt
-    NOTE: http://blog.s9y.org/archives/240-Serendipity-1.6.1-released.html
-    NOTE: CVE id requested http://seclists.org/oss-sec/2012/q2/276
+	- serendipity <unfixed> (bug #671937; medium)
+	NOTE: http://www.koramis.com/advisories/2012/KORAMIS-ADV2012-001.txt
+	NOTE: http://blog.s9y.org/archives/240-Serendipity-1.6.1-released.html
+	NOTE: CVE id requested http://seclists.org/oss-sec/2012/q2/276
 CVE-2012-2330 [node.js <0.6.17/0.7.8 HTTP server information disclosure]
 	RESERVED
 	- nodejs 0.6.17~dfsg1-1
@@ -563,6 +563,7 @@
 	- jbossas4 <not-affected> (Only affects JBoss 7)
 CVE-2012-2311 [PHP-CGI query string parameter vulnerability]
 	RESERVED
+	{DSA-2465-1}
 	- php5 5.4.3-1 (bug #671880)
 	NOTE: This CVE ID is for the initial incomplete fix for CVE-2012-1823
 	NOTE: http://www.kb.cert.org/vuls/id/520827
@@ -1275,28 +1276,28 @@
 	RESERVED
 CVE-2012-2034
 	RESERVED
-CVE-2012-2033
-	RESERVED
-CVE-2012-2032
-	RESERVED
-CVE-2012-2031
-	RESERVED
-CVE-2012-2030
-	RESERVED
-CVE-2012-2029
-	RESERVED
-CVE-2012-2028
-	RESERVED
-CVE-2012-2027
-	RESERVED
-CVE-2012-2026
-	RESERVED
-CVE-2012-2025
-	RESERVED
-CVE-2012-2024
-	RESERVED
-CVE-2012-2023
-	RESERVED
+CVE-2012-2033 (Adobe Shockwave Player before 11.6.5.635 allows attackers to execute ...)
+	TODO: check
+CVE-2012-2032 (Adobe Shockwave Player before 11.6.5.635 allows attackers to execute ...)
+	TODO: check
+CVE-2012-2031 (Adobe Shockwave Player before 11.6.5.635 allows attackers to execute ...)
+	TODO: check
+CVE-2012-2030 (Adobe Shockwave Player before 11.6.5.635 allows attackers to execute ...)
+	TODO: check
+CVE-2012-2029 (Adobe Shockwave Player before 11.6.5.635 allows attackers to execute ...)
+	TODO: check
+CVE-2012-2028 (Buffer overflow in Adobe Photoshop before CS6 allows remote attackers ...)
+	TODO: check
+CVE-2012-2027 (Use-after-free vulnerability in Adobe Photoshop before CS6 allows ...)
+	TODO: check
+CVE-2012-2026 (Adobe Illustrator before CS6 allows attackers to execute arbitrary ...)
+	TODO: check
+CVE-2012-2025 (Adobe Illustrator before CS6 allows attackers to execute arbitrary ...)
+	TODO: check
+CVE-2012-2024 (Adobe Illustrator before CS6 allows attackers to execute arbitrary ...)
+	TODO: check
+CVE-2012-2023 (Adobe Illustrator before CS6 allows attackers to execute arbitrary ...)
+	TODO: check
 CVE-2012-2022
 	RESERVED
 CVE-2012-2021
@@ -1323,12 +1324,12 @@
 	RESERVED
 CVE-2012-2010
 	RESERVED
-CVE-2012-2009
-	RESERVED
-CVE-2012-2008
-	RESERVED
-CVE-2012-2007
-	RESERVED
+CVE-2012-2009 (Unspecified vulnerability in HP Performance Insight for Networks ...)
+	TODO: check
+CVE-2012-2008 (Cross-site scripting (XSS) vulnerability in HP Performance Insight for ...)
+	TODO: check
+CVE-2012-2007 (SQL injection vulnerability in HP Performance Insight for Networks ...)
+	TODO: check
 CVE-2012-2006 (Unspecified vulnerability in HP Insight Management Agents before ...)
 	NOT-FOR-US: Proprietary HP monitoring tools
 CVE-2012-2005 (Cross-site scripting (XSS) vulnerability in HP Insight Management ...)
@@ -1401,8 +1402,8 @@
 	NOT-FOR-US: SyndeoCMS
 CVE-2012-1978
 	RESERVED
-CVE-2012-1977
-	RESERVED
+CVE-2012-1977 (WellinTech KingSCADA 3.0 uses a cleartext base64 format for storage of ...)
+	TODO: check
 CVE-2012-1976
 	RESERVED
 CVE-2012-1975
@@ -1673,10 +1674,10 @@
 	RESERVED
 CVE-2012-1849
 	RESERVED
-CVE-2012-1848
-	RESERVED
-CVE-2012-1847
-	RESERVED
+CVE-2012-1848 (win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and ...)
+	TODO: check
+CVE-2012-1847 (Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; ...)
+	TODO: check
 CVE-2012-1846 (Google Chrome 17.0.963.66 and earlier allows remote attackers to ...)
 	TODO: check
 CVE-2012-1845 (Use-after-free vulnerability in Google Chrome 17.0.963.66 and earlier ...)
@@ -1726,6 +1727,7 @@
 	RESERVED
 CVE-2012-1823 [PHP-CGI query string parameter vulnerability]
 	RESERVED
+	{DSA-2465-1}
 	- php5 5.4.3-1
 	NOTE: http://ompldr.org/vZGxxaQ https://bugs.php.net/bug.php?id=61910
 	NOTE: 5.4.2-1 'fixed' this, but fix is incomplete: CVE-2012-2311
@@ -2041,8 +2043,8 @@
 	RESERVED
 CVE-2012-1676 (Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking ...)
 	TODO: check
-CVE-2012-1675
-	RESERVED
+CVE-2012-1675 (The TNS Listener, as used in Oracle Database 11g 11.1.0.7, 11.2.0.2, ...)
+	TODO: check
 CVE-2012-1674 (Unspecified vulnerability in the Siebel Clinical component in Oracle ...)
 	TODO: check
 CVE-2012-1673 (SQL injection vulnerability in loginscript.php in e-ticketing allows ...)
@@ -3209,6 +3211,7 @@
 	- tiff 4.0.1-2
 CVE-2012-1172 [PHP 5.3.x Corrupted $_FILES indices lead to security concern]
 	RESERVED
+	{DSA-2465-1}
 	- php5 5.4.0-1 (bug #663760)
 CVE-2012-1171 [safemode bypass after RSHUTDOWN]
 	RESERVED
@@ -3449,6 +3452,7 @@
 	RESERVED
 	NOT-FOR-US: JBoss Operations Network
 CVE-2012-1099 (Cross-site scripting (XSS) vulnerability in ...)
+	{DSA-2466-1}
 	- ruby-actionpack-2.3 2.3.14-3 (bug #668607)
 	- rails 2.3.14
 	[squeeze] - rails <unfixed>
@@ -4038,11 +4042,11 @@
 	- mumble 1.2.3-3 (bug #659039)
 CVE-2012-0862 [xinetd enables unintentional services over tcpmux port]
 	RESERVED
-    - xinetd <unfixed>
-    TODO: check
-    NOTE: Red Hat bug https://bugzilla.redhat.com/show_bug.cgi?id=790940
-    NOTE: Red Hat proposed patch https://bugzilla.redhat.com/attachment.cgi?id=583311
-    NOTE: http://seclists.org/oss-sec/2012/q2/283
+	- xinetd <unfixed>
+	TODO: check
+	NOTE: Red Hat bug https://bugzilla.redhat.com/show_bug.cgi?id=790940
+	NOTE: Red Hat proposed patch https://bugzilla.redhat.com/attachment.cgi?id=583311
+	NOTE: http://seclists.org/oss-sec/2012/q2/283
 CVE-2012-0861
 	RESERVED
 CVE-2012-0860
@@ -4297,12 +4301,12 @@
 CVE-2012-0781 (The tidy_diagnose function in PHP 5.3.8 might allow remote attackers ...)
 	{DSA-2408-1}
 	- php5 5.3.9-1 (low)
-CVE-2012-0780
-	RESERVED
+CVE-2012-0780 (Adobe Illustrator before CS6 allows attackers to execute arbitrary ...)
+	TODO: check
 CVE-2012-0779 (Adobe Flash Player before 10.3.183.19 and 11.x before 11.2.202.235 on ...)
 	NOT-FOR-US: Adobe Flash Player
-CVE-2012-0778
-	RESERVED
+CVE-2012-0778 (Buffer overflow in Adobe Flash Professional before CS6 allows ...)
+	TODO: check
 CVE-2012-0777 (The JavaScript API in Adobe Reader and Acrobat 9.x before 9.5.1 and ...)
 	NOT-FOR-US: Adobe Reader
 CVE-2012-0776 (The installer in Adobe Reader 9.x before 9.5.1 and 10.x before 10.1.3 ...)
@@ -4517,10 +4521,10 @@
 	NOT-FOR-US: TIBCO ActiveMatrix
 CVE-2012-0686
 	RESERVED
-CVE-2012-0685
-	RESERVED
-CVE-2012-0684
-	RESERVED
+CVE-2012-0685 (Integer overflow in XnViewer (aka XnView) before 1.98.5 allows remote ...)
+	TODO: check
+CVE-2012-0684 (Integer overflow in XnViewer (aka XnView) before 1.98.5 allows remote ...)
+	TODO: check
 CVE-2012-0683
 	RESERVED
 CVE-2012-0682
@@ -5850,23 +5854,23 @@
 CVE-2011-4962 [silverstripe: Potential remote code execution]
 	RESERVED
 	- silverstripe <itp> (bug #528461)
-    NOTE: http://seclists.org/oss-sec/2012/q2/209
+	NOTE: http://seclists.org/oss-sec/2012/q2/209
 CVE-2011-4961 [silverstripe: Privilege escalation]
 	RESERVED
 	- silverstripe <itp> (bug #528461)
-    NOTE: http://seclists.org/oss-sec/2012/q2/209
+	NOTE: http://seclists.org/oss-sec/2012/q2/209
 CVE-2011-4960 [silverstripe: SQL injection]
 	RESERVED
 	- silverstripe <itp> (bug #528461)
-    NOTE: http://seclists.org/oss-sec/2012/q2/209
+	NOTE: http://seclists.org/oss-sec/2012/q2/209
 CVE-2011-4959 [silverstripe: SQL injection]
 	RESERVED
 	- silverstripe <itp> (bug #528461)
-    NOTE: http://seclists.org/oss-sec/2012/q2/209
+	NOTE: http://seclists.org/oss-sec/2012/q2/209
 CVE-2011-4958 [silverstripe:XSS]
 	RESERVED
 	- silverstripe <itp> (bug #528461)
-    NOTE: http://seclists.org/oss-sec/2012/q2/209
+	NOTE: http://seclists.org/oss-sec/2012/q2/209
 CVE-2011-4957
 	RESERVED
 	- wordpress 3.2.1+dfsg-1
@@ -6276,16 +6280,16 @@
 	NOT-FOR-US: Winamp
 CVE-2010-5080 [SilverStripe HTTP referer leakage on Security/changepassword]
 	RESERVED
-    - silverstripe <itp> (bug #528461)
-    NOTE: http://seclists.org/oss-sec/2012/q2/209
+	- silverstripe <itp> (bug #528461)
+	NOTE: http://seclists.org/oss-sec/2012/q2/209
 CVE-2010-5079 [SilverStripe weak entropy in tokens for CSRF protection, autologin, "forgot password" emails and password salts]
 	RESERVED
-    - silverstripe <itp> (bug #528461)
-    NOTE: http://seclists.org/oss-sec/2012/q2/209
+	- silverstripe <itp> (bug #528461)
+	NOTE: http://seclists.org/oss-sec/2012/q2/209
 CVE-2010-5078 [SilverStripe version number information disclosure]
 	RESERVED
-    - silverstripe <itp> (bug #528461)
-    NOTE: http://seclists.org/oss-sec/2012/q2/209
+	- silverstripe <itp> (bug #528461)
+	NOTE: http://seclists.org/oss-sec/2012/q2/209
 CVE-2010-5077 [quake3 reflective UDP denial of service]
 	RESERVED
 	{DSA-2442-1}
@@ -6412,6 +6416,7 @@
 	[lenny] - apt <not-affected> (Vulnerable code not present)
 CVE-2012-0213
 	RESERVED
+	{DSA-2468-1}
 CVE-2012-0212
 	RESERVED
 	{DSA-2409-1}
@@ -6530,30 +6535,30 @@
 	- ruby1.8 1.8.7.358-1
 	- ruby1.9 <not-affected> (Includes randomisation of the hash function)
 	- ruby1.9.1 <not-affected> (Includes randomisation of the hash function)
-CVE-2012-0185
-	RESERVED
-CVE-2012-0184
-	RESERVED
-CVE-2012-0183
-	RESERVED
+CVE-2012-0185 (Heap-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and ...)
+	TODO: check
+CVE-2012-0184 (Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; ...)
+	TODO: check
+CVE-2012-0183 (Microsoft Word 2003 SP3 and 2007 SP2 and SP3, Office 2008 and 2011 for ...)
+	TODO: check
 CVE-2012-0182
 	RESERVED
-CVE-2012-0181
-	RESERVED
-CVE-2012-0180
-	RESERVED
-CVE-2012-0179
-	RESERVED
-CVE-2012-0178
-	RESERVED
+CVE-2012-0181 (win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and ...)
+	TODO: check
+CVE-2012-0180 (win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and ...)
+	TODO: check
+CVE-2012-0179 (Double free vulnerability in tcpip.sys in Microsoft Windows Server ...)
+	TODO: check
+CVE-2012-0178 (Race condition in partmgr.sys in Windows Partition Manager in ...)
+	TODO: check
 CVE-2012-0177 (Heap-based buffer overflow in the Office Works File Converter in ...)
 	NOT-FOR-US: Microsoft
-CVE-2012-0176
-	RESERVED
+CVE-2012-0176 (Double free vulnerability in Microsoft Silverlight 4 before 4.1.10329 ...)
+	TODO: check
 CVE-2012-0175
 	RESERVED
-CVE-2012-0174
-	RESERVED
+CVE-2012-0174 (Windows Firewall in tcpip.sys in Microsoft Windows Vista SP2, Windows ...)
+	TODO: check
 CVE-2012-0173
 	RESERVED
 CVE-2012-0172 (Microsoft Internet Explorer 6 through 8 does not properly handle ...)
@@ -6566,24 +6571,24 @@
 	NOT-FOR-US: Microsoft Internet Explorer
 CVE-2012-0168 (Microsoft Internet Explorer 6 through 9 allows user-assisted remote ...)
 	NOT-FOR-US: Microsoft Internet Explorer
-CVE-2012-0167
-	RESERVED
+CVE-2012-0167 (Heap-based buffer overflow in the Office GDI+ library in Microsoft ...)
+	TODO: check
 CVE-2012-0166
 	RESERVED
-CVE-2012-0165
-	RESERVED
-CVE-2012-0164
-	RESERVED
+CVE-2012-0165 (GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2 and Office ...)
+	TODO: check
+CVE-2012-0164 (Microsoft .NET Framework 4 does not properly compare index values, ...)
+	TODO: check
 CVE-2012-0163 (Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, and ...)
 	NOT-FOR-US: Microsoft .NET Framework
-CVE-2012-0162
-	RESERVED
-CVE-2012-0161
-	RESERVED
-CVE-2012-0160
-	RESERVED
-CVE-2012-0159
-	RESERVED
+CVE-2012-0162 (Microsoft .NET Framework 4 does not properly allocate buffers, which ...)
+	TODO: check
+CVE-2012-0161 (Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, ...)
+	TODO: check
+CVE-2012-0160 (Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, ...)
+	TODO: check
+CVE-2012-0159 (Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows ...)
+	TODO: check
 CVE-2012-0158 (The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ...)
 	NOT-FOR-US: Microsoft
 CVE-2012-0157 (win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and ...)
@@ -6615,14 +6620,11 @@
 	NOT-FOR-US: Microsoft
 CVE-2012-0144 (Cross-site scripting (XSS) vulnerability in themeweb.aspx in Microsoft ...)
 	NOT-FOR-US: Microsoft
-CVE-2012-0143
-	RESERVED
+CVE-2012-0143 (Microsoft Excel 2003 SP3 and Office 2008 for Mac do not properly ...)
 	NOT-FOR-US: Microsoft
-CVE-2012-0142
-	RESERVED
+CVE-2012-0142 (Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; ...)
 	NOT-FOR-US: Microsoft
-CVE-2012-0141
-	RESERVED
+CVE-2012-0141 (Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; ...)
 	NOT-FOR-US: Microsoft
 CVE-2012-0140
 	RESERVED
@@ -7935,8 +7937,8 @@
 	NOT-FOR-US: Microsoft
 CVE-2012-0019 (Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle ...)
 	NOT-FOR-US: Microsoft
-CVE-2012-0018
-	RESERVED
+CVE-2012-0018 (Microsoft Visio Viewer 2010 Gold and SP1 does not properly validate ...)
+	TODO: check
 CVE-2012-0017 (Cross-site scripting (XSS) vulnerability in inplview.aspx in Microsoft ...)
 	NOT-FOR-US: Microsoft
 CVE-2012-0016 (Untrusted search path vulnerability in Microsoft Expression Design; ...)
@@ -9213,8 +9215,8 @@
 	NOT-FOR-US: Steema TeeChart 
 CVE-2011-4032
 	RESERVED
-CVE-2011-4031
-	RESERVED
+CVE-2011-4031 (Integer underflow in the asfrtp_parse_packet function in ...)
+	TODO: check
 CVE-2011-4030 (The CMFEditions component 2.x in Plone 4.0.x through 4.0.9, 4.1, and ...)
 	- plone3 <not-affected> (Only affects Plone 4.x)
 CVE-2011-4029
@@ -11918,16 +11920,16 @@
 	NOTE: This ID is for an incomplete fix for CVE-2011-2896
 CVE-2010-4824 [SilverStripe SQL injection with Translatable extension enabled]
 	RESERVED
-    - silverstripe <itp> (bug #528461)
-    NOTE: http://seclists.org/oss-sec/2012/q2/209
+	- silverstripe <itp> (bug #528461)
+	NOTE: http://seclists.org/oss-sec/2012/q2/209
 CVE-2010-4823 [SilverStripe XSS in controller handling for missing actions]
 	RESERVED
-    - silverstripe <itp> (bug #528461)
-    NOTE: http://seclists.org/oss-sec/2012/q2/209
+	- silverstripe <itp> (bug #528461)
+	NOTE: http://seclists.org/oss-sec/2012/q2/209
 CVE-2010-4822 [SilverStripe SQL information disclosure in MySQLDatabase]
 	RESERVED
-    - silverstripe <itp> (bug #528461)
-    NOTE: http://seclists.org/oss-sec/2012/q2/209
+	- silverstripe <itp> (bug #528461)
+	NOTE: http://seclists.org/oss-sec/2012/q2/209
 CVE-2010-4821
 	RESERVED
 	NOT-FOR-US: phpMyFAQ




More information about the Secure-testing-commits mailing list