Author: joeyh Date: 2009-03-25 21:14:11 +0000 (Wed, 25 Mar 2009) New Revision: 11474
Modified: data/CVE/list Log: automatic update Modified: data/CVE/list =================================================================== --- data/CVE/list 2009-03-25 13:30:50 UTC (rev 11473) +++ data/CVE/list 2009-03-25 21:14:11 UTC (rev 11474) @@ -1,3 +1,61 @@ +CVE-2009-1073 + RESERVED +CVE-2009-1072 (nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD ...) + TODO: check +CVE-2009-1071 (Stack-based buffer overflow in Icarus 2.0 allows remote attackers to ...) + TODO: check +CVE-2009-1070 (Cross-site scripting (XSS) vulnerability in system/index.php in ...) + TODO: check +CVE-2009-1069 (Multiple cross-site scripting (XSS) vulnerabilities in the node edit ...) + TODO: check +CVE-2009-1068 (Stack-based buffer overflow in BS.Player (bsplayer) 2.32 Build 975 ...) + TODO: check +CVE-2009-1067 (Cross-site scripting (XSS) vulnerability in index.php in Pixie CMS ...) + TODO: check +CVE-2009-1066 (SQL injection vulnerability in the referral function in ...) + TODO: check +CVE-2009-1065 (SQL injection vulnerability in index.php in Pixie CMS 1.01a allows ...) + TODO: check +CVE-2009-1064 (Argument injection vulnerability in orbitmxt.dll 2.1.0.2 in the Orbit ...) + TODO: check +CVE-2009-1063 (Buffer overflow in eXeScope 6.50 allows user-assisted remote attackers ...) + TODO: check +CVE-2009-1062 (Unspecified vulnerability in Adobe Acrobat Reader 9 before 9.1, 8 ...) + TODO: check +CVE-2009-1061 (Unspecified vulnerability in Adobe Acrobat Reader 9 before 9.1, 8 ...) + TODO: check +CVE-2009-1060 (Unspecified vulnerability in Apple Safari on Mac OS X 10.5.6 allows ...) + TODO: check +CVE-2009-1059 (Stack-based buffer overflow in Trident PowerZip 7.2 might allow remote ...) + TODO: check +CVE-2009-1058 (Stack-based buffer overflow in ZipGenius might allow remote attackers ...) + TODO: check +CVE-2009-1057 (MicroSmarts Enterprise ZipItFast! 3.0 allows remote attackers to ...) + TODO: check +CVE-2009-1056 (IBM Rational AppScan Enterprise before 5.5 FP1 allows remote attackers ...) + TODO: check +CVE-2009-1055 (Unspecified vulnerability in the web service in Sitecore CMS 5.3.1 ...) + TODO: check +CVE-2009-1054 (Unspecified vulnerability in JustSystems Ichitaro 13, 2004 through ...) + TODO: check +CVE-2009-1053 (chaozzDB 1.2 and earlier stores sensitive information under the web ...) + TODO: check +CVE-2009-1052 (FireAnt 1.3 and earlier stores sensitive information under the web ...) + TODO: check +CVE-2009-1051 (FubarForum 1.6 and earlier stores sensitive information under the web ...) + TODO: check +CVE-2009-1050 (Bloginator 1A allows remote attackers to bypass authentication and ...) + TODO: check +CVE-2009-1049 (SQL injection vulnerability in articleCall.php in Bloginator 1A allows ...) + TODO: check +CVE-2008-6515 (Cross-site scripting (XSS) vulnerability in Fritz Berger yet another ...) + TODO: check +CVE-2008-6514 (The Expo plugin in Compiz Fusion 0.7.8 allows local users with ...) + TODO: check +CVE-2008-6513 (Unrestricted file upload vulnerability in saa.php in Andy's PHP ...) + TODO: check +CVE-2008-6512 (Cross-domain vulnerability in the WorkerPool API in Google Gears ...) + TODO: check CVE-2009-1048 RESERVED CVE-2009-1047 (Cross-site scripting (XSS) vulnerability in the Send by e-mail module ...) @@ -4,7 +62,7 @@ TODO: check CVE-2009-1046 (The console selection feature in the Linux kernel 2.6.28 before ...) TODO: check -CVE-2009-1045 (Stack-based buffer overflow in requests/status.xml in VLC 0.9.8a ...) +CVE-2009-1045 (requests/status.xml in VLC 0.9.8a allows remote attackers to cause a ...) TODO: check CVE-2009-1044 (Unspecified vulnerability in Mozilla Firefox 3.0.7 on Windows 7 allows ...) TODO: check @@ -12,8 +70,8 @@ NOT-FOR-US: Microsoft CVE-2009-1042 (Unspecified vulnerability in Apple Safari on Mac OS X 10.5.6 allows ...) NOT-FOR-US: Apple Safari -CVE-2009-1041 - RESERVED +CVE-2009-1041 (The ktimer feature (sys/kern/kern_time.c) in FreeBSD 7.0, 7.1, and 7.2 ...) + TODO: check CVE-2008-6511 (Open redirect vulnerability in login.jsp in Openfire 3.6.0a and ...) NOT-FOR-US: Openfire CVE-2008-6510 (Cross-site scripting (XSS) vulnerability in login.jsp in the Admin ...) @@ -302,8 +360,8 @@ TODO: check CVE-2009-0929 (Directory traversal vulnerability in the media manager in Nucleus CMS ...) NOT-FOR-US: Nucleus CMS -CVE-2009-0928 - RESERVED +CVE-2009-0928 (Heap-based buffer overflow in Adobe Acrobat Reader and Acrobat ...) + TODO: check CVE-2009-0927 (Unspecified vulnerability in Adobe Reader and Adobe Acrobat 9.1 and ...) NOT-FOR-US: Adobe Reader and Adobe Acrobat CVE-2009-0926 (Unspecified vulnerability in the UFS filesystem functionality in Sun ...) @@ -321,11 +379,9 @@ TODO: check if DSAs are required CVE-2008-6481 (SQL injection vulnerability in the Versioning component ...) NOT-FOR-US: Versioning component (com_versioning) in Joomla! and Mambo -CVE-2009-0921 - RESERVED +CVE-2009-0921 (Multiple heap-based buffer overflows in OvCgi/Toolbar.exe in HP ...) NOT-FOR-US: HP Openview -CVE-2009-0920 - RESERVED +CVE-2009-0920 (Stack-based buffer overflow in OvCgi/Toolbar.exe in HP OpenView ...) NOT-FOR-US: HP Openview CVE-2009-0919 (DFLabs PTK 1.0.0 through 1.0.4 has (1) "lamp" as its default password ...) NOT-FOR-US: DFLabs PTK @@ -399,8 +455,8 @@ RESERVED CVE-2009-0892 RESERVED -CVE-2009-0891 - RESERVED +CVE-2009-0891 (The Web Services Security component in IBM WebSphere Application ...) + TODO: check CVE-2009-0890 RESERVED CVE-2009-0889 @@ -767,8 +823,8 @@ RESERVED CVE-2009-0788 RESERVED -CVE-2009-0787 - RESERVED +CVE-2009-0787 (The ecryptfs_write_metadata_to_contents function in the eCryptfs ...) + TODO: check CVE-2009-0786 RESERVED CVE-2009-0785 @@ -2590,9 +2646,9 @@ CVE-2009-0365 (The dbus request handler in (1) network-manager-applet and (2) ...) - network-manager-applet 0.7.0.99-1 (medium) - network-manager 0.7.0.99-1 (medium) -CVE-2009-0364 - RESERVED +CVE-2009-0364 (Format string vulnerability in the mini_calendar component in ...) {DSA-1752-1} + TODO: check CVE-2009-0363 (Multiple buffer overflows in (a) BarnOwl before 1.0.5 and (b) owl ...) {DTSA-197-1} - barnowl 1.0.5-1 @@ -3158,8 +3214,8 @@ RESERVED CVE-2009-0208 (Unspecified vulnerability in HP Virtual Rooms Client before 7.0.1, ...) NOT-FOR-US: HP Virtual Rooms Client -CVE-2009-0207 - RESERVED +CVE-2009-0207 (Unspecified vulnerability in HP-UX B.11.11 running VERITAS Oracle Disk ...) + TODO: check CVE-2009-0206 (Unspecified vulnerability in NFS in HP ONCplus B.11.31.05 and earlier ...) NOT-FOR-US: HP ONCplus CVE-2009-0205 @@ -3186,8 +3242,8 @@ RESERVED CVE-2009-0194 RESERVED -CVE-2009-0193 - RESERVED +CVE-2009-0193 (Unspecified vulnerability in Adobe Acrobat Reader 9 before 9.1, 8 ...) + TODO: check CVE-2009-0192 RESERVED CVE-2009-0191 (Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, ...) _______________________________________________ Secure-testing-commits mailing list Secure-testing-commits@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/secure-testing-commits