security/vuxml 1.1_6

- Update last Samba entry, 	* Add reference to the samba advisories 	* Fix the PORTVERSION/PORTEPOCH

Reviewed by:	simon
Approved by:	portmgr (ports-security blanket)

Document samba - multiple vulnerabilities

Reviewed by:	remko
Approved by:	portmgr (ports-security blanket)

postnuke 0.763 is not vulnerable to 35f2679f-52d7-11db-8f1a-000a48049292 so mark it as not vulnerable.

Approved by:	portmgr (ports-security blanket)

Improve JDK version coverage.  We should consider PORTEPOCH'ed version separately, so restruct the range.

Approved by:	portmgr (ports-security blanket)

Document PHP multiple vulnerabilities that are fixed by php 5.2.5.

Approved by:	portmgr (ports-security blanket)

- Fix c93e4d41-75c5-11dc-b903-0016179b2dd5 entry

Submitted by:	glewis
Reviewed by:	remko
Approved by:	portmgr (ports-security blanket)

print/cups-base is vulnerable for all previous versions to 1.3.3_2, not all coming ones.

Submitted by:	Andrew Daugherity <ADaugherity@vprmail.tamu.edu>
Approved by:	portmgr (self)

Document mt-daapd -- denial of service vulnerability, also correct the previous entry style wise.

Submitted by:	Mark D. Foster <mark at foster dot cc> with minor
		modifications by me.

Approved by:	portmgr (secteam blanket)

- Update xpdf -- multiple remote Stream.CC vulnerabilities 	 * Mark cups-base as safe

Approved by:	portmgr (ports-security blanket)

o Add a patch for CVE-2007-5846, and add an entry for vuxml.

Approved by:  portmgr (marcus)

- Document flac -- media file processing integer overflow vulnerabilities

Reviewed by:	simon
Approved by:	portsmgr (ports-security blanket)
Thanks to:	naddy

Unbreak file by closing </li> tag.

Approved by:	portmgr (secteam blanket)

Document xpdf arbitrary code execution vulnerability, as documented in CVE-2007-4352, CVE-2007-5392, CVE-2007-5393.

Approved by:	portmgr (ports-security blanket)

dinoex@ has choosen to apply a vendor patch that has resolved CVE-2007-4351 instead of upgrading to 1.3.4.  Mark this updated version as not vulnerable.

Approved by:	portmgr (ports-security blanket)

Document plone arbitrary code execution vulnerability.

Approved by:	portmgr (ports-security blanket)

- Updated the last gftp entry (we have 2.0.18_6 in the portstree not 2.10.18_6)

Submitted by:	Fabian Keil (via private mail)
Approved by:	portmgr (ports-security blanket)

- Document phpmyadmin -- cross-site scripting vulnerability

Reviewed by:	simon
Approved by:	portmgr (ports-security blanket)

Document gallery2 multiple vulnerabilities.

Approved by:	portmgr (ports-security blanket)

- Document tikiwiki -- multiple vulnerabilities

Reviewed by:	simon
Approved by:	portmgr (ports-security blanket)

Document cups-base remote buffer overflow vulnerability.

Approved by:	portmgr (ports-security blanket)

Make perl entry to cover perl-threaded as well.

Reported by:	Andy Greenwood <greenwood.andy gmail com>
Approved by:	portmgr (ports-security blanket)

- Document perl --  regular expressions unicode data buffer overflow

Reviewed by:	simon/tobez
Approved by:	portmgr (blanket) (ports-security blanket)

Document pcre arbitrary code execution vulnerability.

Approved by:	portmgr (ports-security blanket)

- perdition entry - correct range

Approved by:	portmgr (pav) linimon (mentor)

- Add entry for mail/perdition

PR:		ports/117796
Approved by:	portmgr (pav), linimon (mentor)

- gftp -- multiple vulnerabilities

Reviewed by:	simom
Approved by:	portmgr (blanket) (ports-security blanket)

- Update dirproxy -- remote denial of service 	 * Add net/dirproxy with the same affect 	 * Update net/dirproxy-devel as safe

Reviewed by:	simon
Approved by:	portmgr (blanket) (ports-security blanket)

- dirproxy -- remote denial of service

Reviewed by:	remko
Approved by:	portmgr (blanket) (ports-security blanket)

- Fix discovery date on my previous commit

Approved by:	portmgr (ports-security blanket)

- document wordpress -- cross-site scripting

Reviewed by:	simon
Approved by:	portmgr (ports-security blanket)

Extend coverage to OpenLDAP 2.4.x series which is affected according to CVS history.

Approved by:	portmgr (ports-security blanket)

Document openldap multiple vulnerabilities.

Approved by:	portmgr (ports-security blanket)

Bump modified date for entry updated in last commit.

Approved by:	portmgr (secteam blanket)

Update vuxml to reflect that mod_jk and mod_jk-ap2 have different portepochs.

Approved by:	portmgr (pav)

- Update mozilla -- code execution via Quicktime media-link files

PR:		117704
Submitted by:	John Hein <jhein@timing.com>
Reviewed by:	simon
Approved by:	portmgr (blanket) secteam (blanket via simon)

Document django DoS issue.

- Fix day entry for 498a8731-7cfc-11dc-96e6-0012f06707f0

Reviewed by:	simon

- Document opera -- multiple vulnerabilities

Reviewed by:	remko

- Document drupal --- multiple vulnerabilities

Reviewed by:	simon

- Document ldapscripts -- Command Line User Credentials Disclosure

PR:		117152
Submitted by:	Ganael Laplanche <ganael.laplanche at martymac.com> (maintainer/author)
		rafan@
Reviewed by:	simon@

Modify firefox entry to cover linux-* variants.

Document firefox JavaScript Entrapment vulnerabilities.

- Fix year entry in 498a8731-7cfc-11dc-96e6-0012f06707f0

Submitted by:	freshports
Thanks to:	Dan Langille

- Add new line between entries.

- Add entry about recent phpMyAdmin XSS server_status.php vulnerability - Fix URL in my previous entry while I'm here.

- Fix package name in 51b51d4a-7c0f-11dc-9e47-0011d861d5e2 and   229577a8-0936-11db-bf72-00046151137e entries (phpmyadmin->phpMyAdmin).

- Add entry about phpMyAdmin XSS vulnerability.

nagios-plugins -- Long Location Header Buffer Overflow Vulnerability

Reviewed by:	simon

Document png -- multiple vulnerabilities

Reviewed by:	simon

Document ImageMagick - Multiple vulnerabilities

Submitted by:		Nick Barkas