Author: joeyh
Date: 2007-02-06 09:14:13 +0100 (Tue, 06 Feb 2007)
New Revision: 5420
Modified:
data/CVE/list
Log:
automatic update
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2007-02-06 01:27:08 UTC (rev 5419)
+++ data/CVE/list 2007-02-06 08:14:13 UTC (rev 5420)
@@ -1,3 +1,171 @@
+CVE-2007-0769 (** DISPUTED ** ...)
+ TODO: check
+CVE-2007-0768 (Multiple cross-site scripting (XSS) vulnerabilities in the
Contact ...)
+ TODO: check
+CVE-2007-0767 (Cross-site scripting (XSS) vulnerability in the core in Phorum
before ...)
+ TODO: check
+CVE-2007-0766 (Stack-based buffer overflow in Remotesoft .NET Explorer 2.0.1
allows ...)
+ TODO: check
+CVE-2007-0765 (SQL injection vulnerability in news.php in dB Masters Curium
CMS 1.03 ...)
+ TODO: check
+CVE-2007-0764 (Unrestricted file upload vulnerability in F3Site 2.1 and
earlier ...)
+ TODO: check
+CVE-2007-0763 (Cross-site scripting (XSS) vulnerability in the news comment
...)
+ TODO: check
+CVE-2007-0762 (PHP remote file inclusion vulnerability in
includes/functions.php in ...)
+ TODO: check
+CVE-2007-0761 (PHP remote file inclusion vulnerability in config.php in phpBB
ezBoard ...)
+ TODO: check
+CVE-2007-0760 (EQdkp 1.3.1 and earlier authenticates administrative requests
by ...)
+ TODO: check
+CVE-2007-0759 (Multiple SQL injection vulnerabilities in EasyMoblog 0.5.1
allow ...)
+ TODO: check
+CVE-2007-0758 (PHP remote file inclusion vulnerability in lang.php in
PHPProbid 5.24 ...)
+ TODO: check
+CVE-2007-0757 (PHP remote file inclusion vulnerability in index.php in Miguel
Nunes ...)
+ TODO: check
+CVE-2007-0756 (Chicken of the VNC (cotv) 2.0 allows remote attackers to cause
a ...)
+ TODO: check
+CVE-2007-0755
+ RESERVED
+CVE-2007-0754
+ RESERVED
+CVE-2007-0753
+ RESERVED
+CVE-2007-0752
+ RESERVED
+CVE-2007-0751
+ RESERVED
+CVE-2007-0750
+ RESERVED
+CVE-2007-0749
+ RESERVED
+CVE-2007-0748
+ RESERVED
+CVE-2007-0747
+ RESERVED
+CVE-2007-0746
+ RESERVED
+CVE-2007-0745
+ RESERVED
+CVE-2007-0744
+ RESERVED
+CVE-2007-0743
+ RESERVED
+CVE-2007-0742
+ RESERVED
+CVE-2007-0741
+ RESERVED
+CVE-2007-0740
+ RESERVED
+CVE-2007-0739
+ RESERVED
+CVE-2007-0738
+ RESERVED
+CVE-2007-0737
+ RESERVED
+CVE-2007-0736
+ RESERVED
+CVE-2007-0735
+ RESERVED
+CVE-2007-0734
+ RESERVED
+CVE-2007-0733
+ RESERVED
+CVE-2007-0732
+ RESERVED
+CVE-2007-0731
+ RESERVED
+CVE-2007-0730
+ RESERVED
+CVE-2007-0729
+ RESERVED
+CVE-2007-0728
+ RESERVED
+CVE-2007-0727
+ RESERVED
+CVE-2007-0726
+ RESERVED
+CVE-2007-0725
+ RESERVED
+CVE-2007-0724
+ RESERVED
+CVE-2007-0723
+ RESERVED
+CVE-2007-0722
+ RESERVED
+CVE-2007-0721
+ RESERVED
+CVE-2007-0720
+ RESERVED
+CVE-2007-0719
+ RESERVED
+CVE-2007-0718
+ RESERVED
+CVE-2007-0717
+ RESERVED
+CVE-2007-0716
+ RESERVED
+CVE-2007-0715
+ RESERVED
+CVE-2007-0714
+ RESERVED
+CVE-2007-0713
+ RESERVED
+CVE-2007-0712
+ RESERVED
+CVE-2007-0711
+ RESERVED
+CVE-2007-0710
+ RESERVED
+CVE-2007-0709 (cmdmon.sys in Comodo Firewall Pro (formerly Comodo Personal
Firewall) ...)
+ TODO: check
+CVE-2007-0708 (cmdmon.sys in Comodo Firewall Pro (formerly Comodo Personal
Firewall) ...)
+ TODO: check
+CVE-2007-0707 (Stack-based buffer overflow in GOM Player 2.0.12.3375 allows
...)
+ TODO: check
+CVE-2007-0706 (Cross-zone scripting vulnerability in Darksky RSS bar for
Internet ...)
+ TODO: check
+CVE-2007-0705 (Cross-zone scripting vulnerability in Sleipnir 2.49 and
earlier, and ...)
+ TODO: check
+CVE-2007-0704 (PHP remote file inclusion vulnerability in install.php in
Somery 0.4.6 ...)
+ TODO: check
+CVE-2007-0703 (PHP remote file inclusion vulnerability in
library/StageLoader.php in ...)
+ TODO: check
+CVE-2007-0702 (Multiple PHP remote file inclusion vulnerabilities in
phpEventMan ...)
+ TODO: check
+CVE-2007-0701 (PHP remote file inclusion vulnerability in inc/common.inc.php
in ...)
+ TODO: check
+CVE-2007-0700 (Directory traversal vulnerability in index.php in Guernion
Sylvain ...)
+ TODO: check
+CVE-2007-0699 (PHP remote file inclusion vulnerability in
includes/includes.php in ...)
+ TODO: check
+CVE-2007-0698 (Multiple SQL injection vulnerabilities in ACGVannu 1.3 and
earlier ...)
+ TODO: check
+CVE-2007-0697 (index2.php in ACGVannu 1.3 and earlier allows remote attackers
to ...)
+ TODO: check
+CVE-2007-0696 (Cross-site scripting (XSS) vulnerability in error messages in
Free LAN ...)
+ TODO: check
+CVE-2007-0695 (Multiple SQL injection vulnerabilities in Free LAN
In(tra|ter)net ...)
+ TODO: check
+CVE-2007-0694
+ RESERVED
+CVE-2007-0693
+ RESERVED
+CVE-2007-0692
+ RESERVED
+CVE-2007-0691
+ RESERVED
+CVE-2007-0690
+ RESERVED
+CVE-2007-0689
+ RESERVED
+CVE-2006-6968 (Cross-site scripting (XSS) vulnerability in the group
moderation ...)
+ TODO: check
+CVE-2006-6967 (Check Point FireWall-1 allows remote attackers to obtain
certificate ...)
+ TODO: check
+CVE-2006-6966 (phpGraphy before 0.9.13a does not properly unset variables when
the ...)
+ TODO: check
CVE-2007-XXXX [remctl ACL bypass vulnerability]
- remctl 2.2-2
[sarge] - remctl <not-affected> (Vulnerable code not present)
@@ -38,7 +206,7 @@
NOT-FOR-US: (CA) BrightStor
CVE-2007-0672 (LGSERVER.EXE in BrightStor Mobile Backup 4.0 allows remote
attackers ...)
NOT-FOR-US: (CA) BrightStor
-CVE-2007-0671 (Unspecified vulnerability in Microsoft Excel 2000, XP, and 2003
allows ...)
+CVE-2007-0671 (Unspecified vulnerability in Microsoft Excel 2000, XP, 2003,
and 2004 ...)
NOT-FOR-US: Microsoft Excel
CVE-2007-0670 (Buffer overflow in bos.rte.libc in IBM AIX 5.3 allows local
users to ...)
NOT-FOR-US: IBM AIX
@@ -131,7 +299,7 @@
NOT-FOR-US: xNews
CVE-2007-0629 (The www_purgeList method in Plain Black WebGUI before 7.3.8
does not ...)
NOT-FOR-US: Plain Black WebGUI
-CVE-2007-0628 (Cross-site scripting (XSS) vulnerability in Sun Java System
Access ...)
+CVE-2007-0628 (Multiple cross-site scripting (XSS) vulnerabilities in Sun Java
System ...)
NOT-FOR-US: Sun Java System Access Manager
CVE-2007-0627 (Michael Still gtalkbot before 1.2 places username and password
...)
NOT-FOR-US: gtalkbot
@@ -280,10 +448,10 @@
NOT-FOR-US: Cisco
CVE-2007-0557 (rMake before 1.0.4 drops root privileges in a way that retains
the ...)
NOT-FOR-US: rPath
-CVE-2007-0556
- RESERVED
-CVE-2007-0555
- RESERVED
+CVE-2007-0556 (The query planner in PostgreSQL before 8.0.11, 8.1 before
8.1.7, and ...)
+ TODO: check
+CVE-2007-0555 (PostgreSQL 7.3 before 7.3.13, 7.4 before 7.4.16, 8.0 before
8.0.11, ...)
+ TODO: check
CVE-2007-0554 (SQL injection vulnerability in print.asp in Guo Xu Guos Posting
System ...)
NOT-FOR-US: Guos Posting System
CVE-2007-0553 (Multiple cross-site scripting (XSS) vulnerabilities in
index.inc.php ...)
@@ -437,14 +605,14 @@
NOT-FOR-US: Openads
CVE-2007-0476 (The gencert.sh script, when installing OpenLDAP before
2.1.30-r10, ...)
- openldap2 <not-affected> (Gentoo packaging bug)
-CVE-2007-0475
- RESERVED
-CVE-2007-0474
- RESERVED
-CVE-2007-0473
- RESERVED
-CVE-2007-0472
- RESERVED
+CVE-2007-0475 (Multiple stack-based buffer overflows in utilities/smb4k_*.cpp
in ...)
+ TODO: check
+CVE-2007-0474 (Smb4K before 0.8.0 allow local users, when present on the Smb4K
...)
+ TODO: check
+CVE-2007-0473 (The writeFile function in core/smb4kfileio.cpp in Smb4K before
0.8.0 ...)
+ TODO: check
+CVE-2007-0472 (Multiple race conditions in Smb4K before 0.8.0 allow local
users to ...)
+ TODO: check
CVE-2006-6965 (CRLF injection vulnerability in lib/exe/fetch.php in DokuWiki
...)
- dokuwiki 0.0.20061106-1 (low)
CVE-2006-6964 (MailEnable Professional before 1.78 provides a cleartext user
password ...)
@@ -497,7 +665,7 @@
[etch] - ffmpeg 0.cvs20060823-5
- ffmpeg <unfixed>
- mplayer 1.0~rc1-12
-CVE-2007-0471 (sre/params.php in Check Point Connectra NGX R62 and earlier
allows ...)
+CVE-2007-0471 (sre/params.php in the Integrity Clientless Security (ICS)
component in ...)
NOT-FOR-US: Check Point
CVE-2007-0470 (Multiple unspecified vulnerabilities in tip in Sun Solaris 8,
9, and ...)
NOT-FOR-US: Sun Solaris
@@ -535,15 +703,12 @@
[sarge] - ethereal <not-affected> (Vulnerable code not present)
CVE-2007-0455 (Buffer overflow in the gdImageStringFTEx function in gdft.c in
GD ...)
- libgd2 <unfixed> (bug #408982; low)
-CVE-2007-0454 [samba ASF ACL format string issue]
- RESERVED
+CVE-2007-0454 (Format string vulnerability in the afsacl.so VFS module Samba
3.0.6 ...)
{DSA-1257}
- samba 3.0.23d-5 (medium)
-CVE-2007-0453 [samba NSS winbind buffer overflow]
- RESERVED
+CVE-2007-0453 (Buffer overflow in the nss_winbind.so.1 library in Samba 3.0.21
...)
- samba <not-affected> (Solaris-specific vulnerability)
-CVE-2007-0452 [samba deferred open DoS]
- RESERVED
+CVE-2007-0452 (smbd in Samba 3.0.6 through 3.0.23d allows remote authenticated
users ...)
{DSA-1257}
- samba 3.0.23d-5 (low)
CVE-2007-0451
@@ -576,8 +741,8 @@
RESERVED
CVE-2007-0437
RESERVED
-CVE-2007-0436
- RESERVED
+CVE-2007-0436 (Unspecified vulnerability in Barron McCann X-Kryptor Driver ...)
+ TODO: check
CVE-2005-4824 (PHP remote file inclusion vulnerability in web/classes.php in
...)
NOT-FOR-US: siteframe
CVE-2007-0435 (T-Com Speedport 500V routers with firmware 1.31 allow remote
attackers ...)
@@ -3064,7 +3229,7 @@
NOT-FOR-US: F-Prot Antivirus
CVE-2006-6293 (Heap-based buffer overflow in FRISK Software F-Prot Antivirus
before ...)
NOT-FOR-US: F-Prot Antivirus
-CVE-2006-6292 (Apple Airport Extreme firmware 0.1.27 in Mac OS X 10.4.8 allows
remote ...)
+CVE-2006-6292 (Apple Airport Extreme firmware 0.1.27 in Mac OS X 10.4.8 on Mac
mini, ...)
NOT-FOR-US: Apple Airport
CVE-2006-6291 (Stack overflow in the IMAP module (MEIMAPS.EXE) in MailEnable
...)
NOT-FOR-US: MailEnable Professional
_______________________________________________
Secure-testing-commits mailing list
[email protected]
http://lists.alioth.debian.org/mailman/listinfo/secure-testing-commits
