Author: joeyh
Date: 2013-04-30 21:14:24 +0000 (Tue, 30 Apr 2013)
New Revision: 22107
Modified:
data/CVE/list
Log:
automatic update
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2013-04-30 14:50:51 UTC (rev 22106)
+++ data/CVE/list 2013-04-30 21:14:24 UTC (rev 22107)
@@ -1,3 +1,17 @@
+CVE-2013-3309
+ RESERVED
+CVE-2013-3308
+ RESERVED
+CVE-2013-3307
+ RESERVED
+CVE-2013-3306
+ RESERVED
+CVE-2013-3305
+ RESERVED
+CVE-2013-3304
+ RESERVED
+CVE-2013-3303
+ RESERVED
CVE-2013-XXXX [automysqlbackup code injection]
- automysqlbackup 2.6+debian.3-1 (bug #706099)
CVE-2013-XXXX [autopostgresqlbackup code injection]
@@ -771,6 +785,7 @@
RESERVED
CVE-2013-2944
RESERVED
+ {DSA-2665-1}
- strongswan 4.6.4-7
CVE-2013-2943
RESERVED
@@ -3042,8 +3057,7 @@
NOT-FOR-US: RESTful Web Services (RESTWS) Drupal cotributed module
CVE-2013-1945
RESERVED
-CVE-2013-1944 [libcurl cookie domain tailmatch]
- RESERVED
+CVE-2013-1944 (The tailMatch function in cookie.c in cURL and libcurl before
7.30.0 ...)
{DSA-2660-1}
- curl 7.29.0-2.1 (bug #705274)
[wheezy] - curl 7.26.0-1+wheezy2
@@ -3106,11 +3120,9 @@
CVE-2013-1928 (The do_video_set_spu_palette function in fs/compat_ioctl.c in
the ...)
- linux <unfixed>
- linux-2.6 <removed>
-CVE-2013-1927
- RESERVED
+CVE-2013-1927 (The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2
allows ...)
- icedtea-web 1.3.2-1
-CVE-2013-1926
- RESERVED
+CVE-2013-1926 (The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 uses
the ...)
- icedtea-web 1.3.2-1
CVE-2013-1925
RESERVED
@@ -3153,8 +3165,7 @@
- libapache-mod-security <removed>
NOTE:
https://github.com/SpiderLabs/ModSecurity/commit/d4d80b38aa85eccb26e3c61b04d16e8ca5de76fe
NOTE: http://marc.info/?l=oss-security&m=136499182131283&w=2
-CVE-2013-1914 [getaddrinfo() stack overflow]
- RESERVED
+CVE-2013-1914 (Stack-based buffer overflow in the getaddrinfo function in ...)
- eglibc <unfixed> (bug #704623)
CVE-2013-1913
RESERVED
@@ -5024,8 +5035,8 @@
NOT-FOR-US: Cisco Unified Computing System
CVE-2013-1197 (The XML parser in the server in Cisco Unified Presence (CUP)
allows ...)
NOT-FOR-US: Cisco Unified Presence
-CVE-2013-1196
- RESERVED
+CVE-2013-1196 (The command-line interface in Cisco Secure Access Control
System ...)
+ TODO: check
CVE-2013-1195 (The time-based ACL implementation on Cisco Adaptive Security
...)
NOT-FOR-US: isco Adaptive Security Appliances
CVE-2013-1194 (The ISAKMP implementation on Cisco Adaptive Security Appliances
(ASA) ...)
@@ -9203,12 +9214,12 @@
NOT-FOR-US: IBM TRIRIGA Application Platform
CVE-2012-5948 (Multiple cross-site scripting (XSS) vulnerabilities in IBM
TRIRIGA ...)
NOT-FOR-US: IBM TRIRIGA Application Platform
-CVE-2012-5947
- RESERVED
-CVE-2012-5946
- RESERVED
-CVE-2012-5945
- RESERVED
+CVE-2012-5947 (Buffer overflow in the vsflex7l ActiveX control in IBM SPSS ...)
+ TODO: check
+CVE-2012-5946 (Buffer overflow in the c1sizer ActiveX control in C1sizer.ocx
in IBM ...)
+ TODO: check
+CVE-2012-5945 (Multiple buffer overflows in the Vsflex8l ActiveX control in
IBM SPSS ...)
+ TODO: check
CVE-2012-5944
RESERVED
CVE-2012-5943 (Cross-site scripting (XSS) vulnerability in IBM iNotes 8.5.x
before ...)
@@ -11086,8 +11097,8 @@
NOT-FOR-US: vBSEO
CVE-2012-5222
RESERVED
-CVE-2012-5221
- RESERVED
+CVE-2012-5221 (Unspecified vulnerability on the HP LaserJet 4xxx, 5200, 90xx,
M30xx, ...)
+ TODO: check
CVE-2012-5220 (Unspecified vulnerability in HP Storage Data Protector 6.20,
6.21, ...)
NOT-FOR-US: HP Storage Data Protector
CVE-2012-5219 (Cross-site scripting (XSS) vulnerability in HP Managed Printing
...)
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
