Author: sf
Date: 2009-01-06 11:26:58 +0000 (Tue, 06 Jan 2009)
New Revision: 10868
Modified:
data/CVE/list
Log:
new: linux, java, mediawiki(unimportant)
some NFUs
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2009-01-06 09:14:11 UTC (rev 10867)
+++ data/CVE/list 2009-01-06 11:26:58 UTC (rev 10868)
@@ -311,7 +311,7 @@
CVE-2008-5695 (wp-admin/options.php in WordPress MU before 1.3.2, and
WordPress 2.3.2 ...)
- wordpress <unfixed>
CVE-2008-5694 (PHP remote file inclusion vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Sandbox
CVE-2008-5693 (Ipswitch WS_FTP Server Manager 6.1.0.0 and earlier, and
possibly other ...)
NOT-FOR-US: Ipswitch WS_FTP Server Manager
CVE-2008-5692 (Ipswitch WS_FTP Server Manager before 6.1.1, and possibly other
...)
@@ -323,7 +323,8 @@
CVE-2008-5689 (tun in IP Tunnel in Solaris 10 and OpenSolaris snv_01 through
snv_76 ...)
NOT-FOR-US: Solaris
CVE-2008-5688 (MediaWiki 1.8.1 through 1.13.3, when the wgShowExceptionDetails
...)
- TODO: check
+ - mediawiki <unfixed> (unimportant)
+ NOTE: Installation path disclosure not treated as a security issue
CVE-2008-5687 (MediaWiki 1.11 through 1.13.3 does not properly protect against
the ...)
TODO: check
CVE-2008-5686 (IBM Tivoli Provisioning Manager (TPM) before 5.1.1.1 IF0006,
when its ...)
@@ -682,9 +683,9 @@
CVE-2008-5551 (The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 allows
remote ...)
NOT-FOR-US: Microsoft Internet Explorer
CVE-2008-5550 (Open redirect vulnerability in
console/faces/jsp/login/BeginLogin.jsp ...)
- TODO: check
+ NOT-FOR-US: Sun Java Web Console
CVE-2008-5549 (Unspecified vulnerability in the Sun Java Web Console
components in ...)
- TODO: check
+ NOT-FOR-US: Sun Java Web Console
CVE-2008-5548 (VirusBuster 4.5.11.0, when Internet Explorer 6 or 7 is used,
allows ...)
NOT-FOR-US: Microsoft Internet Explorer
CVE-2008-5547 (HAURI ViRobot 2008.12.4.1499 and possibly 2008.9.12.1375, when
...)
@@ -1050,7 +1051,8 @@
CVE-2008-5396 (Array index error in the (1) torisa.c and (2) dahdi/tor2.c
drivers in ...)
- zaptel 1:1.4.11~dfsg-3
CVE-2008-5395 (The parisc_show_stack function in arch/parisc/kernel/traps.c in
the ...)
- TODO: check
+ - linux-2.6 <unfixed>
+ - linux-2.6.24 <removed>
CVE-2008-5393 (UPR-Kernel in Ubuntu Privacy Remix (UPR) before 8.04_r1
includes ...)
NOT-FOR-US: Ubuntu Privacy Remix
CVE-2008-5392
@@ -1128,11 +1130,11 @@
CVE-2008-5364 (Stack-based buffer overflow in the getPlus ActiveX control in
gp.ocx ...)
NOT-FOR-US: getPlus
CVE-2008-5363 (The ActionScript 2 virtual machine in Adobe Flash Player 10.x
before ...)
- TODO: check
+ NOT-FOR-US: Adobe Flash Player
CVE-2008-5362 (The DefineConstantPool action in the ActionScript 2 virtual
machine in ...)
- TODO: check
+ NOT-FOR-US: Adobe Flash Player
CVE-2008-5361 (The ActionScript 2 virtual machine in Adobe Flash Player 10.x
before ...)
- TODO: check
+ NOT-FOR-US: Adobe Flash Player
CVE-2008-5617 (The ACL handling in rsyslog 3.12.1 to 3.20.0, 4.1.0, and 4.1.1
does ...)
- rsyslog 3.18.6-1 (bug #508027)
CVE-2008-5624 (PHP 5 before 5.2.7 does not properly initialize the page_uid
and ...)
@@ -1143,49 +1145,93 @@
CVE-2008-5660 (Format string vulnerability in the vinagre_utils_show_error
function ...)
- vinagre 0.5.1-2
CVE-2008-5360 (Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10
and ...)
- TODO: check
+ - sun-java5 <unfixed> (low; bug #508194)
+ - sun-java6 <unfixed> (low; bug #508195)
+ - openjdk-6 <unfixed> (low; bug #510972)
CVE-2008-5359 (Buffer overflow in Java Runtime Environment (JRE) for Sun JDK
and JRE ...)
- TODO: check
+ - sun-java5 <unfixed> (bug #508194)
+ - sun-java6 <unfixed> (bug #508195)
+ - openjdk-6 <unfixed> (bug #510972)
CVE-2008-5358 (Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10
and ...)
- TODO: check
+ - sun-java5 <unfixed> (bug #508194)
+ - sun-java6 <unfixed> (bug #508195)
+ - openjdk-6 <unfixed> (bug #510972)
CVE-2008-5357 (Integer overflow in Java Runtime Environment (JRE) for Sun JDK
and JRE ...)
- TODO: check
+ - sun-java5 <unfixed> (bug #508194)
+ - sun-java6 <unfixed> (bug #508195)
+ - openjdk-6 <unfixed> (bug #510972)
CVE-2008-5356 (Heap-based buffer overflow in Java Runtime Environment (JRE)
for Sun ...)
- TODO: check
+ - sun-java5 <unfixed> (bug #508194)
+ - sun-java6 <unfixed> (bug #508195)
+ - openjdk-6 <unfixed> (bug #510972)
CVE-2008-5355 (The "Java Update" feature for Java Runtime
Environment (JRE) for Sun ...)
- TODO: check
+ - sun-java5 <not-affected> (Java update not used in Debian)
+ - sun-java6 <not-affected> (Java update not used in Debian)
+ - openjdk-6 <not-affected> (Java update not used in Debian)
CVE-2008-5354 (Stack-based buffer overflow in Java Runtime Environment (JRE)
for Sun ...)
- TODO: check
+ - sun-java5 <unfixed> (bug #508194)
+ - sun-java6 <unfixed> (bug #508195)
+ - openjdk-6 <unfixed> (bug #510972)
CVE-2008-5353 (Unspecified vulnerability in Java Runtime Environment (JRE) for
Sun ...)
- TODO: check
+ - sun-java5 <unfixed> (bug #508194)
+ - sun-java6 <unfixed> (bug #508195)
+ - openjdk-6 <unfixed> (bug #510972)
CVE-2008-5352 (Integer overflow in the JAR unpacking utility (unpack200) in
the ...)
- TODO: check
+ - sun-java5 <unfixed> (bug #508194)
+ - sun-java6 <unfixed> (bug #508195)
+ - openjdk-6 <unfixed> (bug #510972)
CVE-2008-5351 (Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10
and ...)
- TODO: check
+ - sun-java5 <unfixed> (bug #508194)
+ - sun-java6 <unfixed> (bug #508195)
+ - openjdk-6 <unfixed> (bug #510972)
CVE-2008-5350 (Unspecified vulnerability in Java Runtime Environment (JRE) for
Sun ...)
- TODO: check
+ - sun-java5 <unfixed> (bug #508194)
+ - sun-java6 <unfixed> (bug #508195)
+ - openjdk-6 <unfixed> (bug #510972)
CVE-2008-5349 (Unspecified vulnerability in Java Runtime Environment (JRE) for
Sun ...)
- TODO: check
+ - sun-java5 <unfixed> (bug #508194)
+ - sun-java6 <unfixed> (bug #508195)
+ - openjdk-6 <unfixed> (bug #510972)
CVE-2008-5348 (Unspecified vulnerability in Java Runtime Environment (JRE) for
Sun ...)
- TODO: check
+ - sun-java5 <unfixed> (bug #508194)
+ - sun-java6 <unfixed> (bug #508195)
+ - openjdk-6 <unfixed> (bug #510972)
CVE-2008-5347 (Multiple unspecified vulnerabilities in Java Runtime
Environment (JRE) ...)
- TODO: check
+ - sun-java5 <unfixed> (bug #508194)
+ - sun-java6 <unfixed> (bug #508195)
+ - openjdk-6 <unfixed> (bug #510972)
CVE-2008-5346 (Unspecified vulnerability in Java Runtime Environment (JRE) for
Sun ...)
- TODO: check
+ - sun-java5 <unfixed> (bug #508194)
+ - sun-java6 <unfixed> (bug #508195)
+ - openjdk-6 <unfixed> (bug #510972)
CVE-2008-5345 (Unspecified vulnerability in Java Runtime Environment (JRE)
with Sun ...)
- TODO: check
+ - sun-java5 <unfixed> (bug #508194)
+ - sun-java6 <unfixed> (bug #508195)
+ - openjdk-6 <unfixed> (bug #510972)
CVE-2008-5344 (Unspecified vulnerability in Java Web Start (JWS) and Java
Plug-in ...)
- TODO: check
+ - sun-java5 <unfixed> (bug #508194)
+ - sun-java6 <unfixed> (bug #508195)
+ - openjdk-6 <unfixed> (bug #510972)
CVE-2008-5343 (Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6
Update 10 ...)
- TODO: check
+ - sun-java5 <unfixed> (bug #508194)
+ - sun-java6 <unfixed> (bug #508195)
+ - openjdk-6 <unfixed> (bug #510972)
CVE-2008-5342 (Unspecified vulnerability in the BasicService for Java Web
Start (JWS) ...)
- TODO: check
+ - sun-java5 <unfixed> (bug #508194)
+ - sun-java6 <unfixed> (bug #508195)
+ - openjdk-6 <unfixed> (bug #510972)
CVE-2008-5341 (Unspecified vulnerability in Java Web Start (JWS) and Java
Plug-in ...)
- TODO: check
+ - sun-java5 <unfixed> (bug #508194)
+ - sun-java6 <unfixed> (bug #508195)
+ - openjdk-6 <unfixed> (bug #510972)
CVE-2008-5340 (Unspecified vulnerability in Java Web Start (JWS) and Java
Plug-in ...)
- TODO: check
+ - sun-java5 <unfixed> (bug #508194)
+ - sun-java6 <unfixed> (bug #508195)
+ - openjdk-6 <unfixed> (bug #510972)
CVE-2008-5339 (Unspecified vulnerability in Java Web Start (JWS) and Java
Plug-in ...)
- TODO: check
+ - sun-java5 <unfixed> (bug #508194)
+ - sun-java6 <unfixed> (bug #508195)
+ - openjdk-6 <unfixed> (bug #510972)
CVE-2008-5338 (Cross-site scripting (XSS) vulnerability in info.php in
Bandwebsite ...)
NOT-FOR-US: Bandwebsite
CVE-2008-5337 (SQL injection vulnerability in lyrics.php in Bandwebsite (aka
Bandsite ...)
_______________________________________________
Secure-testing-commits mailing list
[email protected]
http://lists.alioth.debian.org/mailman/listinfo/secure-testing-commits
