[Secure-testing-commits] r602 - sarge-checks/CAN

Moritz Muehlenhoff jmm-guest@costa.debian.org
Mon, 21 Mar 2005 21:37:40 +0100


Author: jmm-guest
Date: 2005-03-21 21:37:37 +0100 (Mon, 21 Mar 2005)
New Revision: 602

Modified:
   sarge-checks/CAN/list
Log:
More entries not affecting Debian.


Modified: sarge-checks/CAN/list
===================================================================
--- sarge-checks/CAN/list	2005-03-21 20:14:19 UTC (rev 601)
+++ sarge-checks/CAN/list	2005-03-21 20:37:37 UTC (rev 602)
@@ -3,17 +3,17 @@
 CAN-2005-XXXX
 	ltris (unfixed; bug #291620)
 CAN-2005-0823 (ThePoolClub (1) iPool and (2) iSnooker 1.6.81 and earlier stores ...)
-	TODO: check
+	NOTE: not-for-us (iSnooker)
 CAN-2005-0822 (Citrix Metaframe Password Manager 2.5 and earlier stores a password in ...)
-	TODO: check
+	NOTE: not-for-us (Citrix)
 CAN-2005-0821 (Unknown vulnerability in Citrix MetaFrame Conferencing Manager 3.0 ...)
-	TODO: check
+	NOTE: not-for-us (Citrix)
 CAN-2005-0820 (Microsoft Office InfoPath 2003 SP1 includes sensitive information in ...)
 	NOTE: not-for-us (MS Office)
 CAN-2005-0819 (The xvesa code in Novell Netware 6.5 SP2 and SP3 allows remote ...)
-	TODO: check
+	NOTE: not-for-us (Novell Netware)
 CAN-2005-0818 (Cross-site scripting (XSS) vulnerability in PunBB 1.2.3 allows remote ...)
-	TODO: check
+	NOTE: not-for-us (Pun BB)
 CAN-2005-0817 (Unknown vulnerability in the DNSd proxy, as used in Symantec Gateway ...)
 	TODO: check
 CAN-2005-0816 (Buffer overflow in newgrp in Solaris 7 through 9 allows local users to ...)
@@ -43,9 +43,9 @@
 CAN-2005-0804 (Format string vulnerability in MailEnable 1.8 allows remote attackers ...)
 	TODO: check
 CAN-2005-0803 (The GetEnhMetaFilePaletteEntries API in GDI32.DLL in Windows 2000 ...)
-	TODO: check
+	NOTE: not-for-us (Windows)
 CAN-2005-0802 (Cross-site scripting (XSS) vulnerability in search.asp in ACS Blog 0.8 ...)
-	TODO: check
+	NOTE: not-for-us (ACS Blog)
 CAN-2005-0801 (Directory traversal vulnerability in includer.cgi in The Includer ...)
 	TODO: check
 CAN-2005-0800 (PHP remote code injection vulnerability in install.php in mcNews 1.3 ...)
@@ -59,7 +59,7 @@
 CAN-2005-0796 (Directory traversal vulnerability in HolaCMS 1.4.9-1 allows remote ...)
 	TODO: check
 CAN-2005-0795 (HolaCMS 1.4.9 does not restrict file access to the holaDB/votes ...)
-	TODO: check
+	NOTE: not-for-us (Hola CMS)
 CAN-2005-0794 (ZPanel 2.0 and 2.5 beta 10 does not remove or protect installation ...)
 	NOTE: not-for-us (ZPanel not in Debian)
 CAN-2005-0793 (PHP remote code injection vulnerability in zpanel.php in ZPanel allows ...)