[Secure-testing-commits] r1293 - data/CAN

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2005-06-28 09:38:56 +0000 (Tue, 28 Jun 2005)
New Revision: 1293

Modified:
   data/CAN/list
Log:
CANified cacti, some nfu


Modified: data/CAN/list
===================================================================
--- data/CAN/list	2005-06-28 09:26:22 UTC (rev 1292)
+++ data/CAN/list	2005-06-28 09:38:56 UTC (rev 1293)
@@ -24,8 +24,6 @@
 	- clamav 0.86.1-1 (medium)
 CAN-2005-XXXX [clamav-milter timeout DoS]
 	- clamav 0.86-1 (medium)
-CAN-2005-XXXX Multiple XSS and input validation errors in cacti
-	- cacti 0.8.6e-1 (high)
 CAN-2005-XXXX [Buffer overflow in Asterisk's command parser]
 	- asterisk (unfixed; bug #315532; high)
 CAN-2005-2044 (Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.3 ...)
@@ -898,7 +896,7 @@
 CAN-2005-1767
 	NOTE: reserved
 CAN-2005-1766 (Heap-based buffer overflow in rtffplin.cpp in RealPlayer 10.5 ...)
-	TODO: check
+	NOTE: not-for-us (RealPlayer)
 CAN-2005-1765 [Unspecified DoS vulnerability on amd64]
 	NOTE: reserved
 	- kernel-source-2.6.8 (unfixed; unknown)
@@ -1590,11 +1588,11 @@
 CAN-2005-1527
 	NOTE: reserved
 CAN-2005-1526 (PHP file inclusion vulnerability in config_settings.php in Cacti ...)
-	TODO: check
+	- cacti 0.8.6e-1 (high)
 CAN-2005-1525 (SQL injection vulnerability in config_settings.php for Cacti before ...)
-	TODO: check
+	- cacti 0.8.6e-1 (high)
 CAN-2005-1524 (PHP file inclusion vulnerability in top_graph_header.php in Cacti ...)
-	TODO: check
+	- cacti 0.8.6e-1 (high)
 CAN-2005-1523 (Format string vulnerability in imap4d server in GNU Mailutils 0.5 and ...)
 	{DSA-732-1}
 	- mailutils 1:0.6.1-3
@@ -2966,7 +2964,7 @@
 CAN-2005-1251
 	NOTE: reserved
 CAN-2005-1250 (SQL injection vulnerability in the logon screen of the web front end ...)
-	TODO: check
+	NOTE: not-for-us (IpSwitch)
 CAN-2005-1249 (The IMAP daemon (IMAPD32.EXE) in Ipswitch Collaboration Suite (ICS) ...)
 	NOTE: not-for-us (IMail)
 CAN-2005-1248 (Buffer overflow in Apple iTunes before 4.8 allows remote attackers to ...)
@@ -4284,7 +4282,7 @@
 CAN-2005-0773
 	NOTE: reserved
 CAN-2005-0772 (NDMLSRVR.DLL in VERITAS Backup Exec 10.0, 10.0 SP1, and possibly ...)
-	TODO: check
+	NOTE: not-for-us (VERITAS Backup Exec)
 CAN-2005-0771
 	NOTE: reserved
 CAN-2005-0770 (Format string vulnerability in DataRescue Interactive Disassembler and ...)