Author: jmm-guest
Date: 2005-07-15 12:50:31 +0000 (Fri, 15 Jul 2005)
New Revision: 1403
Modified:
data/CAN/list
Log:
new snmp dos issue
Modified: data/CAN/list
===================================================================
--- data/CAN/list 2005-07-15 12:38:28 UTC (rev 1402)
+++ data/CAN/list 2005-07-15 12:50:31 UTC (rev 1403)
@@ -151,35 +151,35 @@
NOTE: not-for-us (Comersus)
CAN-2005-2189 (Lantronix SecureLinx console server running firmware 2.0 and
3.0 ...)
NOTE: not-for-us (Lantronix SecureLinx)
-begin claimed by jmm
CAN-2005-2188 (McAfee IntruShield Security Management System obtains the user
ID from ...)
- TODO: check
+ NOTE: not-for-us (McAfee IntruShield)
CAN-2005-2187 (McAfee IntruShield Security Management System allows remote ...)
- TODO: check
+ NOTE: not-for-us (McAfee IntruShield)
CAN-2005-2186 (Multiple cross-site scripting (XSS) vulnerabilities in McAfee
...)
- TODO: check
+ NOTE: not-for-us (McAfee IntruShield)
CAN-2005-2185 (eRoom does not set an expiration for Cookies, which allows
remote ...)
- TODO: check
+ NOTE: not-for-us (eRoom)
CAN-2005-2184 (eRoom 6.x does not properly restrict files that can be
attached, which ...)
- TODO: check
+ NOTE: not-for-us (eRoom)
CAN-2005-2183 (class.xmail.php in PhpXmail 0.7 through 1.1 does not properly
handle ...)
- TODO: check
+ NOTE: not-for-us (PhpXmail)
CAN-2005-2182 (Grandstream BudgeTone (BT) 100 Voice over IP (VoIP) phones do
not ...)
- TODO: check
+ NOTE: not-for-us (PhpXmail)
CAN-2005-2181 (Cisco 7940/7960 Voice over IP (VoIP) phones do not properly
check the ...)
- TODO: check
+ NOTE: not-for-us (SIP phone hardware issue)
CAN-2005-2180 (gen-index in GNATS 4.0, 4.1.0, and possibly earlier versions,
when ...)
TODO: check
CAN-2005-2179 (PHP remote file inclusion vulnerability in BlogModel.php in
Jaws 0.5.2 ...)
- TODO: check
+ NOTE: not-for-us (Jaws)
CAN-2005-2178 (probe.cgi allows remote attackers to execute arbitrary commands
via ...)
- TODO: check
+ NOTE: How bizarre, they assign a CVE Id without knowing which product
contains
+ NOTE: the affected probe.cgi
CAN-2005-2177 (Unknown vulnerability in Net-SNMP 5.0.x before 5.0.10.2, 5.2.x
before ...)
- TODO: check
+ - net-snmp (unfixed; bug filed; medium)
CAN-2005-2176 (Novell NetMail automatically processes HTML in an attachment
without ...)
- TODO: check
+ NOTE: not-for-us (Novell NetMail)
CAN-2005-2175 (The web interface for Lotus Notes mail automatically processes
HTML in ...)
- TODO: check
+ NOTE: not-for-us (Notes)
CAN-2005-2174 (Bugzilla 2.17.x, 2.18 before 2.18.2, 2.19.x, and 2.20 before
2.20rc1 ...)
- bugzilla 2.18.3-1 (low)
CAN-2005-2173 (The Flag::validate and Flag::modify functions in Bugzilla
2.17.1 to ...)
@@ -189,14 +189,13 @@
CAN-2005-2171
NOTE: reserved
CAN-2005-2170 (The LCF component (lcfd) in IBM Tivoli Management Framework
Endpoint ...)
- TODO: check
+ NOTE: not-for-us (Tivoli)
CAN-2004-2212 (SQL injection vulnerability in forum.asp in AliveSites Forums
2.0 ...)
- TODO: check
+ NOTE: not-for-us (AliveSites)
CAN-2004-2211 (Cross-site scripting (XSS) vulnerability in AliveSites Forums
2.0 ...)
- TODO: check
+ NOTE: not-for-us (AliveSites)
CAN-2004-2210 (Multiple cross-site scripting (XSS) vulnerabilities in
Express-Web ...)
- TODO: check
-end claimed by jmm
+ NOTE: not-for-us (Express-Web)
CAN-2004-2209 (SQL injection vulnerability in Ideal Science IdealBB 1.4.9
through ...)
TODO: check
CAN-2004-2208 (CRLF injection vulnerability in Ideal Science IdealBB 1.4.9
through ...)
_______________________________________________
Secure-testing-commits mailing list
[email protected]
http://lists.alioth.debian.org/mailman/listinfo/secure-testing-commits
