Author: stef-guest
Date: 2007-08-02 21:47:47 +0000 (Thu, 02 Aug 2007)
New Revision: 6218
Modified:
data/CVE/list
Log:
new mysql issues; NFUs
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2007-08-02 21:39:37 UTC (rev 6217)
+++ data/CVE/list 2007-08-02 21:47:47 UTC (rev 6218)
@@ -698,17 +698,20 @@
CVE-2007-3783 (SQL injection vulnerability in default.asp in enVivo!CMS allows
remote ...)
NOT-FOR-US: enVivo!CMS
CVE-2007-3782 (MySQL Community Server before 5.0.45 allows remote
authenticated users ...)
- TODO: check
+ - mysql-dfsg-5.0 5.0.45-1
+ TODO: check mysql 4
CVE-2007-3781 (MySQL Community Server before 5.0.45 does not require
privileges such ...)
- TODO: check
+ - mysql-dfsg-5.0 5.0.45-1
+ TODO: check mysql 4
CVE-2007-3780 (MySQL Community Server before 5.0.45 allows remote attackers to
cause ...)
- TODO: check
+ - mysql-dfsg-5.0 5.0.45-1
+ TODO: check mysql 4
CVE-2007-3779 (PHP local file inclusion vulnerability in gpg_pop_init.php in
the ...)
- TODO: check
+ NOT-FOR-US: G/PGP (GPG) Plugin for Squirrelmail
CVE-2007-3778 (The G/PGP (GPG) Plugin 2.0, and 2.1dev before 20060912, for ...)
- TODO: check
+ NOT-FOR-US: G/PGP (GPG) Plugin for Squirrelmail
CVE-2007-3777 (avg7core.sys 7.5.0.444 in Grisoft AVG Anti-Virus 7.5.448 and
Free ...)
- TODO: check
+ NOT-FOR-US: Grisoft AVG Anti-Virus
CVE-2007-3776 (Cisco Unified Communications Manager (CUCM, formerly
CallManager) and ...)
NOT-FOR-US: Cisco
CVE-2007-3775 (Unspecified vulnerability in Cisco Unified Communications
Manager ...)
@@ -716,9 +719,9 @@
CVE-2007-3774 (Dvbbs 7.1.0 SP1 stores sensitive information under the web root
with ...)
NOT-FOR-US: Dvbbs
CVE-2007-3773 (Cross-site request forgery (CSRF) vulnerability in the
Email-Template ...)
- TODO: check
+ NOT-FOR-US: Generic YouTube Clone Script
CVE-2007-3772 (Directory traversal vulnerability in news/show.php in PsNews
1.1 ...)
- TODO: check
+ NOT-FOR-US: PsNews
CVE-2007-3771 (Stack-based buffer overflow in the Internet E-mail Auto-Protect
...)
TODO: check
CVE-2007-3770 (The terminal_helper_execute function in terminal/terminal.c in
Xfce ...)
_______________________________________________
Secure-testing-commits mailing list
[email protected]
http://lists.alioth.debian.org/mailman/listinfo/secure-testing-commits
