Author: joeyh Date: 2013-08-02 21:14:22 +0000 (Fri, 02 Aug 2013) New Revision: 23177
Modified: data/CVE/list Log: automatic update Modified: data/CVE/list =================================================================== --- data/CVE/list 2013-08-02 20:30:22 UTC (rev 23176) +++ data/CVE/list 2013-08-02 21:14:22 UTC (rev 23177) @@ -695,6 +695,7 @@ NOT-FOR-US: OTRS ITSM CVE-2013-4717 [SQL injection] RESERVED + {DSA-2733-1} - otrs2 3.2.9-1 NOTE: http://www.otrs.com/en/open-source/community-news/security-advisories/security-advisory-2013-05/ CVE-2012-6581 (Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before ...) @@ -913,8 +914,8 @@ NOT-FOR-US: Huawei viewpoint CVE-2013-4628 (The firewall module on the Huawei Quidway Service Process Unit (SPU) ...) NOT-FOR-US: Huawei Quidway Service Process Unit -CVE-2013-4627 - RESERVED +CVE-2013-4627 (Unspecified vulnerability in bitcoind and Bitcoin-Qt 0.8.x allows ...) + TODO: check CVE-2012-6571 (The HTTP module in the (1) Branch Intelligent Management System (BIMS) ...) NOT-FOR-US: Branch Intelligent Management System, Huawei routers CVE-2012-6570 (The HTTP module in the (1) Branch Intelligent Management System (BIMS) ...) @@ -1871,8 +1872,7 @@ RESERVED - evolution <unfixed> (unimportant) NOTE: Regular UI bug, not a security issue. -CVE-2013-4165 [timing leak] - RESERVED +CVE-2013-4165 (The HTTPAuthorized function in bitcoinrpc.cpp in bitcoind 0.8.1 ...) - bitcoin <unfixed> (bug #717828) NOTE: https://github.com/bitcoin/bitcoin/issues/2838 CVE-2013-4164 @@ -3583,8 +3583,8 @@ RESERVED CVE-2013-3449 RESERVED -CVE-2013-3448 - RESERVED +CVE-2013-3448 (Cisco WebEx Meetings Server does not check whether a user account is ...) + TODO: check CVE-2013-3447 RESERVED CVE-2013-3446 @@ -4124,10 +4124,10 @@ - rails 2.3.14.1 (unimportant) NOTE: Starting with 2.3.14.1 rails is a transition package NOTE: This is a general design problem and only mitigated by documented best practices -CVE-2013-3220 - RESERVED -CVE-2013-3219 - RESERVED +CVE-2013-3220 (bitcoind and Bitcoin-Qt before 0.4.9rc2, 0.5.x before 0.5.8rc2, 0.6.x ...) + TODO: check +CVE-2013-3219 (bitcoind and Bitcoin-Qt 0.8.x before 0.8.1 do not enforce a certain ...) + TODO: check CVE-2013-3218 RESERVED CVE-2013-3217 @@ -9769,8 +9769,8 @@ NOT-FOR-US: Cisco Device Manager CVE-2013-1191 RESERVED -CVE-2013-1190 - RESERVED +CVE-2013-1190 (The C-Series Rack Server component 1.4 in Cisco Unified Computing ...) + TODO: check CVE-2013-1189 (Cisco Universal Broadband (aka uBR) 10000 series routers, when an ...) NOT-FOR-US: Cisco Universal Broadband 10000 series routers CVE-2013-1188 (Cisco Unified Communications Manager (CUCM) does not properly limit ...) _______________________________________________ Secure-testing-commits mailing list Secure-testing-commits@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits