[Secure-testing-commits] r21113 - data/CVE

[Joey Hess]

Author: joeyh
Date: 2013-02-01 21:14:31 +0000 (Fri, 01 Feb 2013)
New Revision: 21113

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-02-01 20:51:42 UTC (rev 21112)
+++ data/CVE/list	2013-02-01 21:14:31 UTC (rev 21113)
@@ -1,3 +1,5 @@
+CVE-2013-1591 (Stack-based buffer overflow in libpixman, as used in Pale Moon before ...)
+	TODO: check
 CVE-2013-1590 [http://www.wireshark.org/security/wnpa-sec-2013-09.html]
 	RESERVED
 	- wireshark <unfixed>
@@ -299,10 +301,10 @@
 	RESERVED
 CVE-2013-1463
 	RESERVED
-CVE-2013-1462
-	RESERVED
-CVE-2013-1461
-	RESERVED
+CVE-2013-1462 (Integer signedness error in the ExecuteSoapAction function in the ...)
+	TODO: check
+CVE-2013-1461 (The ExecuteSoapAction function in the SOAPAction handler in the HTTP ...)
+	TODO: check
 CVE-2013-1460
 	RESERVED
 CVE-2013-1459
@@ -1436,8 +1438,8 @@
 	RESERVED
 CVE-2013-0931
 	RESERVED
-CVE-2013-0930
-	RESERVED
+CVE-2013-0930 (Buffer overflow in Drive Control Program (DCP) in EMC AlphaStor 4.0 ...)
+	TODO: check
 CVE-2013-0929 (Format string vulnerability in the _vsnsprintf function in rrobotd.exe ...)
 	NOT-FOR-US: EMC AlphaStor
 CVE-2013-0928 (The NetWorker command processor in rrobotd.exe in the Device Manager ...)
@@ -3316,10 +3318,10 @@
 	NOTE: Upstream forum post: http://www.zoneminder.com/forums/viewtopic.php?f=29&t=20771
 CVE-2013-0231
 	RESERVED
-CVE-2013-0230
-	RESERVED
-CVE-2013-0229
-	RESERVED
+CVE-2013-0230 (Stack-based buffer overflow in the ExecuteSoapAction function in the ...)
+	TODO: check
+CVE-2013-0229 (The ProcessSSDPRequest function in minissdp.c in the SSDP handler in ...)
+	TODO: check
 CVE-2013-0228
 	RESERVED
 CVE-2013-0227
@@ -4644,7 +4646,7 @@
 	- xen <unfixed> (bug #686764)
 	[squeeze] - xen <no-dsa> (Experimental/unsupported feature)
 	[wheezy] - xen <no-dsa> (Experimental/unsupported feature)
-CVE-2012-6029 (Cross-site scripting (XSS) vulnerability in the web-authentication ...)
+CVE-2012-6029 (Multiple cross-site scripting (XSS) vulnerabilities in the ...)
 	TODO: check
 CVE-2012-6028
 	RESERVED
@@ -4774,43 +4776,43 @@
 	NOT-FOR-US: Centreon
 CVE-2012-5966 (The restricted telnet shell on the D-Link DSL2730U router allows ...)
 	NOT-FOR-US: D-Link DSL2730U router
-CVE-2012-5965 [Stack buffer overflow of Event->DeviceType]
-	RESERVED
+CVE-2012-5965 (Stack-based buffer overflow in the unique_service_name function in ...)
+	{DSA-2615-1 DSA-2614-1}
 	- libupnp <unfixed> (bug #699316)
 	- libupnp4 <unfixed> (bug #699459)
 	TODO: check
-CVE-2012-5964 [Stack buffer overflow of Event->DeviceType]
-	RESERVED
+CVE-2012-5964 (Stack-based buffer overflow in the unique_service_name function in ...)
+	{DSA-2615-1 DSA-2614-1}
 	- libupnp <unfixed> (bug #699316)
 	- libupnp4 <unfixed> (bug #699459)
 	TODO: check
-CVE-2012-5963 [Stack buffer overflow of Event->UDN]
-	RESERVED
+CVE-2012-5963 (Stack-based buffer overflow in the unique_service_name function in ...)
+	{DSA-2615-1 DSA-2614-1}
 	- libupnp <unfixed> (bug #699316)
 	- libupnp4 <unfixed> (bug #699459)
 	TODO: check
-CVE-2012-5962 [Stack buffer overflow of Evt->DeviceType]
-	RESERVED
+CVE-2012-5962 (Stack-based buffer overflow in the unique_service_name function in ...)
+	{DSA-2615-1 DSA-2614-1}
 	- libupnp <unfixed> (bug #699316)
 	- libupnp4 <unfixed> (bug #699459)
 	TODO: check
-CVE-2012-5961 [Stack buffer overflow of Evt->UDN]
-	RESERVED
+CVE-2012-5961 (Stack-based buffer overflow in the unique_service_name function in ...)
+	{DSA-2615-1 DSA-2614-1}
 	- libupnp <unfixed> (bug #699316)
 	- libupnp4 <unfixed> (bug #699459)
 	TODO: check
-CVE-2012-5960 [Stack buffer overflow of Event->UDN]
-	RESERVED
+CVE-2012-5960 (Stack-based buffer overflow in the unique_service_name function in ...)
+	{DSA-2615-1 DSA-2614-1}
 	- libupnp <unfixed> (bug #699316)
 	- libupnp4 <unfixed> (bug #699459)
 	TODO: check
-CVE-2012-5959 [Stack buffer overflow of Event->UDN]
-	RESERVED
+CVE-2012-5959 (Stack-based buffer overflow in the unique_service_name function in ...)
+	{DSA-2615-1 DSA-2614-1}
 	- libupnp <unfixed> (bug #699316)
 	- libupnp4 <unfixed> (bug #699459)
 	TODO: check
-CVE-2012-5958 [Stack buffer overflow of Tempbuf]
-	RESERVED
+CVE-2012-5958 (Stack-based buffer overflow in the unique_service_name function in ...)
+	{DSA-2615-1 DSA-2614-1}
 	- libupnp <unfixed> (bug #699316)
 	- libupnp4 <unfixed> (bug #699459)
 	TODO: check
@@ -12004,8 +12006,8 @@
 	NOT-FOR-US: HP Performance Insight
 CVE-2012-3269 (Unspecified vulnerability in HP Performance Insight 5.31, 5.40, and ...)
 	NOT-FOR-US: HP Performance Insight
-CVE-2012-3268
-	RESERVED
+CVE-2012-3268 (Certain HP Access Controller, Fabric Module, Firewall, Router, Switch, ...)
+	TODO: check
 CVE-2012-3267 (Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.20 ...)
 	NOT-FOR-US: HP NNMi
 CVE-2012-3266 (Unspecified vulnerability in IBRIX 6.1.196 through 6.1.251 on HP IBRIX ...)