[Secure-testing-commits] r1650 - data/CAN

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2005-08-26 08:57:46 +0000 (Fri, 26 Aug 2005)
New Revision: 1650

Modified:
   data/CAN/list
Log:
already fixed kernel issue
some nfus


Modified: data/CAN/list
===================================================================
--- data/CAN/list	2005-08-26 08:35:20 UTC (rev 1649)
+++ data/CAN/list	2005-08-26 08:57:46 UTC (rev 1650)
@@ -1,19 +1,19 @@
 CAN-2005-2692 (Multiple SQL injection vulnerabilities in RunCMS 1.2 and earlier allow ...)
-	TODO: check
+	NOTE: not-for-us (RunCMS)
 CAN-2005-2691 (includes/common.php in RunCMS 1.2 and earlier calls the extract ...)
-	TODO: check
+	NOTE: not-for-us (RunCMS)
 CAN-2005-2690 (SQL injection vulnerability in the Downloads module in PostNuke ...)
-	TODO: check
+	NOTE: not-for-us (PostNuke)
 CAN-2005-2689 (Multiple cross-site scripting (XSS) vulnerabilities in PostNuke ...)
-	TODO: check
+	NOTE: not-for-us (PostNuke)
 CAN-2005-2688 (Multiple cross-site scripting (XSS) vulnerabilities in SaveWebPortal ...)
-	TODO: check
+	NOTE: not-for-us (SaveWebPortal)
 CAN-2005-2687 (PHP remote file inclusion vulnerability in SaveWebPortal 3.4 allows ...)
-	TODO: check
+	NOTE: not-for-us (SaveWebPortal)
 CAN-2005-2686 (Directory traversal vulnerability in SaveWebPortal 3.4 allows remote ...)
-	TODO: check
+	NOTE: not-for-us (SaveWebPortal)
 CAN-2005-2685 (SaveWebPortal 3.4 allows remote attackers to execute arbitrary PHP ...)
-	TODO: check
+	NOTE: not-for-us (SaveWebPortal)
 CAN-2005-XXXX [Insecure temp files in firehol]
 	- firehol 1.231-4 (low)
 CAN-2005-2684 (nquser.php in Virtual Edge Netquery 3.11 allows remote attackers to ...)
@@ -1046,7 +1046,9 @@
 CAN-2005-XXXX [Crypto weakness in Tor's handshaking process]
 	- tor 0.1.0.14-1 (medium)
 CAN-2005-2457 (The driver for compressed ISO file systems (zisofs) in the Linux ...)
-	TODO: check
+	NOTE: Will be fixed in DSAs for 2.4.27 and 2.6.8
+	- linux-2.6 2.6.12-3 (medium)
+	- kernel-source-2.4.27 2.4.27-11 (medium)
 CAN-2005-2456 (Array index overflow in the xfrm_sk_policy_insert function in ...)
 	NOTE: Will also be fixed in DSAs for 2.4.27 and 2.6.8
 	- linux-2.6 2.6.12-2 (bug #321401; medium)