Author: joeyh
Date: 2009-02-18 21:14:13 +0000 (Wed, 18 Feb 2009)
New Revision: 11237
Modified:
data/CVE/list
Log:
automatic update
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2009-02-18 21:03:18 UTC (rev 11236)
+++ data/CVE/list 2009-02-18 21:14:13 UTC (rev 11237)
@@ -1,3 +1,75 @@
+CVE-2009-0638
+ RESERVED
+CVE-2009-0637
+ RESERVED
+CVE-2009-0636
+ RESERVED
+CVE-2009-0635
+ RESERVED
+CVE-2009-0634
+ RESERVED
+CVE-2009-0633
+ RESERVED
+CVE-2009-0632
+ RESERVED
+CVE-2009-0631
+ RESERVED
+CVE-2009-0630
+ RESERVED
+CVE-2009-0629
+ RESERVED
+CVE-2009-0628
+ RESERVED
+CVE-2009-0627
+ RESERVED
+CVE-2009-0626
+ RESERVED
+CVE-2009-0625
+ RESERVED
+CVE-2009-0624
+ RESERVED
+CVE-2009-0623
+ RESERVED
+CVE-2009-0622
+ RESERVED
+CVE-2009-0621
+ RESERVED
+CVE-2009-0620
+ RESERVED
+CVE-2009-0619
+ RESERVED
+CVE-2009-0618
+ RESERVED
+CVE-2009-0617
+ RESERVED
+CVE-2009-0616
+ RESERVED
+CVE-2009-0615
+ RESERVED
+CVE-2009-0614
+ RESERVED
+CVE-2009-0613 (Trend Micro InterScan Web Security Suite (IWSS) 3.1 before
build 1237 ...)
+ TODO: check
+CVE-2009-0612 (Trend Micro InterScan Web Security Virtual Appliance (IWSVA)
3.x and ...)
+ TODO: check
+CVE-2009-0611 (Multiple cross-site scripting (XSS) vulnerabilities in ...)
+ TODO: check
+CVE-2009-0610 (Multiple static code injection vulnerabilities in post.php in
Simple ...)
+ TODO: check
+CVE-2009-0609 (Sun Java System Directory Proxy Server in Sun Java System
Directory ...)
+ TODO: check
+CVE-2009-0608 (Integer overflow in the showLog function in fake_log_device.c
in ...)
+ TODO: check
+CVE-2009-0607 (Multiple integer overflows in malloc_leak.c in Bionic in Open
Handset ...)
+ TODO: check
+CVE-2009-0606 (The link_image function in linker/linker.c in the dynamic
linker in ...)
+ TODO: check
+CVE-2009-0605 (Stack consumption vulnerability in the do_page_fault function
in ...)
+ TODO: check
+CVE-2008-6158 (Multiple unspecified vulnerabilities in the admin backend in
w3b>cms ...)
+ TODO: check
+CVE-2008-6157 (SepCity Classified Ads stores the admin password in cleartext
in ...)
+ TODO: check
CVE-2009-0604 (SQL injection vulnerability in index.php in PHP Director 0.21
and ...)
NOT-FOR-US: PHP Director
CVE-2009-0603 (Cross-site scripting (XSS) vulnerability in index.php in the
Link ...)
@@ -229,6 +301,7 @@
CVE-2008-6125 (Unspecified vulnerability in the user editing interface in
Moodle ...)
TODO: check
CVE-2008-6124 (SQL injection vulnerability in the
hotpot_delete_selected_attempts ...)
+ {DSA-1691-1}
- moodle 1.8.2.dfsg-2
CVE-2008-6123 (The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in
net-snmp ...)
TODO: check
@@ -305,8 +378,8 @@
RESERVED
CVE-2009-0505
RESERVED
-CVE-2009-0504
- RESERVED
+CVE-2009-0504 (WSPolicy in the Web Services component in IBM WebSphere
Application ...)
+ TODO: check
CVE-2009-0503 (IBM WebSphere Message Broker 6.1.x before 6.1.0.2 writes a
database ...)
NOT-FOR-US: IBM WebSphere
CVE-2008-6110 (Unspecified vulnerability in SemanticScuttle before 0.90 has
unknown ...)
@@ -855,8 +928,7 @@
RESERVED
CVE-2009-0364
RESERVED
-CVE-2009-0363 [barnowl sprintf calls]
- RESERVED
+CVE-2009-0363 (Multiple buffer overflows in (a) BarnOwl before 1.0.5 and (b)
owl ...)
{DTSA-197-1}
- barnowl 1.0.5-1
CVE-2009-0362 (filter.d/wuftpd.conf in Fail2ban 0.8.3 uses an incorrect
regular ...)
@@ -868,8 +940,7 @@
CVE-2009-0360 (Russ Allbery pam-krb5 before 3.13, when linked against MIT
Kerberos, ...)
{DSA-1721-1}
- libpam-krb5 3.13-2
-CVE-2009-0359 [Cross-site scripting via missing input sanitising]
- RESERVED
+CVE-2009-0359 (Multiple cross-site scripting (XSS) vulnerabilities in Samizdat
before ...)
{DTSA-194-1}
- samizdat <unfixed>
CVE-2009-0358 (Mozilla Firefox 3.x before 3.0.6 does not properly implement
the (1) ...)
@@ -5776,8 +5847,8 @@
RESERVED
CVE-2008-4286
RESERVED
-CVE-2008-4285
- RESERVED
+CVE-2008-4285 (Unspecified vulnerability in the Performance Monitoring
Infrastructure ...)
+ TODO: check
CVE-2008-4284 (Open redirect vulnerability in the ibm_security_logout servlet
in IBM ...)
NOT-FOR-US: IBM WebSphere Application Server
CVE-2008-4283 (CRLF injection vulnerability in the WebContainer component in
IBM ...)
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/mailman/listinfo/secure-testing-commits
