[Secure-testing-commits] r2573 - data/CVE

Micah Anderson micah at costa.debian.org
Tue Oct 25 21:38:47 UTC 2005 

Author: micah
Date: 2005-10-25 21:38:40 +0000 (Tue, 25 Oct 2005)
New Revision: 2573

Modified:
   data/CVE/list
Log:
Replace all the remaining NFUs with:
NOTE: not-for-us (\(.*\)) with NOT-FOR-US: \1


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2005-10-25 21:26:13 UTC (rev 2572)
+++ data/CVE/list	2005-10-25 21:38:40 UTC (rev 2573)
@@ -18080,46 +18080,46 @@
 	TODO: check
 	- gallery 1.3-3
 CVE-2004-0356 (Stack-based buffer overflow in Supervisor Report Center in SL Mail Pro ...)
-	NOTE: not-for-us (windows mta)
+	NOT-FOR-US: windows mta
 CVE-2004-0347 (Cross-site scripting (XSS) vulnerability in delhomepage.cgi in ...)
-	NOTE: not-for-us (juniper router)
+	NOT-FOR-US: juniper router
 CVE-2004-0336 (LAN SUITE Web Mail 602Pro allows remote attackers to gain sensitive ...)
-	NOTE: not-for-us (windows mta)
+	NOT-FOR-US: windows mta
 CVE-2004-0320 (Unknown vulnerability in nCipher Hardware Security Modules (HSM) ...)
-	NOTE: not-for-us (ncipher hardware)
+	NOT-FOR-US: ncipher hardware
 CVE-2004-0309 (Stack-based buffer overflow in the SMTP service support in vsmon.exe ...)
-	NOTE: not-for-us (windows firewall)
+	NOT-FOR-US: windows firewall
 CVE-2004-0307 (Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), and ONS 15454 ...)
-	NOTE: not-for-us (cisco)
+	NOT-FOR-US: cisco
 CVE-2004-0306 (Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), ONS 15454 SD ...)
-	NOTE: not-for-us (cisco)
+	NOT-FOR-US: cisco
 CVE-2004-0297 (Buffer overflow in the Lightweight Directory Access Protocol (LDAP) ...)
-	NOTE: not-for-us (windows mta)
+	NOT-FOR-US: windows mta
 CVE-2004-0276 (The get_real_string function in Monkey HTTP Daemon (monkeyd) 0.8.1 and ...)
-	NOTE: not-for-us (monkeyd, not in debian)
+	NOT-FOR-US: monkeyd, not in debian
 CVE-2004-0274 (Share.mod in Eggheads Eggdrop IRC bot 1.6.10 through 1.6.15 can ...)
 	- eggdrop 1.6.17
 CVE-2004-0273 (Directory traversal vulnerability in RealOne Player, RealOne Player ...)
-	NOTE: not-for-us (realone player)
+	NOT-FOR-US: realone player
 CVE-2004-0270 (libclamav in Clam AntiVirus 0.65 allows remote attackers to cause a ...)
 	- libclamav1 0.80
 CVE-2004-0263 (PHP 4.3.4 and earlier in Apache 1.x and 2.x (mod_php) can leak global ...)
 	- libapache-mod-php4 4.3.9
 CVE-2004-0261 (oj.cgi in OpenJournal 2.0 through 2.0.5 allows remote attackers to ...)
-	NOTE: not-for-us (openjournal, not in debian)
+	NOT-FOR-US: openjournal, not in debian
 CVE-2004-0257 (OpenBSD 3.4 and NetBSD 1.6 and 1.6.1 allow remote attackers to cause a ...)
-	NOTE: not-for-us (open/netbsd)
+	NOT-FOR-US: open/netbsd
 CVE-2004-0256 (GNU libtool before 1.5.2, during compile time, allows local users to ...)
 	- libtool 1.5.6
 CVE-2004-0194 (Stack-based buffer overflow in the OutputDebugString function for ...)
-	NOTE: not-for-us (acroread)
+	NOT-FOR-US: acroread
 CVE-2004-0193 (Heap-based buffer overflow in the ISS Protocol Analysis Module (PAM), ...)
-	NOTE: not-for-us (realsecure/blackice)
+	NOT-FOR-US: realsecure/blackice
 CVE-2004-0191 (Mozilla before 1.4.2 executes Javascript events in the context of a ...)
 	- mozilla-browser 2:1.7.3
 	TODO: test
 CVE-2004-0190 (Symantec FireWall/VPN Appliance model 200 records a cleartext ...)
-	NOTE: not-for-us (symantec)
+	NOT-FOR-US: symantec
 CVE-2004-0189 (The "%xx" URL decoding function in Squid 2.5STABLE4 and earlier allows ...)
 	{DSA-474}
 CVE-2004-0188 (Heap-based buffer overflow in Calife 2.8.5 and earlier may allow local ...)
@@ -18131,15 +18131,15 @@
 	{DSA-457}
 	- wu-ftpd 2.6.2-17.2
 CVE-2004-0173 (Directory traversal vulnerability in Apache 1.3.29 and earlier, and ...)
-	NOTE: not-for-us (apache/cygwin)
+	NOT-FOR-US: apache/cygwin
 CVE-2004-0171 (FreeBSD 5.1 and earlier, and Mac OS X before 10.3.4, allows remote ...)
-	NOTE: not-for-us (freebsd/os x)
+	NOT-FOR-US: freebsd/os x
 CVE-2004-0169 (QuickTime Streaming Server in MacOS X 10.2.8 and 10.3.2 allows remote ...)
-	NOTE: not-for-us (os x)
+	NOT-FOR-US: os x
 CVE-2004-0167 (DiskArbitration in Mac OS X 10.2.8 and 10.3.2 does not properly ...)
-	NOTE: not-for-us (os x)
+	NOT-FOR-US: os x
 CVE-2004-0165 (Format string vulnerability in Point-to-Point Protocol (PPP) daemon ...)
-	NOTE: not-for-us (os x)
+	NOT-FOR-US: os x
 CVE-2004-0160 (Synaesthesia 2.2 and earlier allows local users to execute arbitrary ...)
 	{DSA-446}
 CVE-2004-0159 (Format string vulnerability in hsftp 1.11 allows remote authenticated ...)
@@ -18150,21 +18150,21 @@
 	{DSA-457}
 	- wu-ftpd 2.6.2-17.2
 CVE-2004-0131 (The rad_print_request function in logger.c for GNU Radius daemon ...)
-	NOTE: not-for-us (gnu radiusd, not in debian)
+	NOT-FOR-US: gnu radiusd, not in debian
 CVE-2004-0129 (Directory traversal vulnerability in export.php in phpMyAdmin 2.5.5 ...)
 	- phpmyadmin 2:2.6.0-pl2
 CVE-2004-0128 (PHP remote code injection vulnerability in the GEDCOM configuration ...)
-	NOTE: not-for-us (phpgedview, not in debian)
+	NOT-FOR-US: phpgedview, not in debian
 CVE-2004-0126 (The jail_attach system call in FreeBSD 5.1 and 5.2 changes the ...)
-	NOTE: not-for-us (freebsd)
+	NOT-FOR-US: freebsd
 CVE-2004-0122 (Microsoft MSN Messenger 6.0 and 6.1 does not properly handle certain ...)
-	NOTE: not-for-us (microsoft)
+	NOT-FOR-US: microsoft
 CVE-2004-0121 (Argument injection vulnerability in Microsoft Outlook 2002 does not ...)
-	NOTE: not-for-us (microsoft)
+	NOT-FOR-US: microsoft
 CVE-2004-0115 (VirtualPC_Services in Microsoft Virtual PC for Mac 6.0 through 6.1 ...)
-	NOTE: not-for-us (microsoft)
+	NOT-FOR-US: microsoft
 CVE-2004-0114 (The shmat system call in the System V Shared Memory interface for ...)
-	NOTE: not-for-us (bsd)
+	NOT-FOR-US: bsd
 CVE-2004-0113 (Memory leak in ssl_engine_io.c for mod_ssl in Apache 2 before 2.0.49 ...)
 	- apache2 2.0.52
 CVE-2004-0111 (gdk-pixbuf before 0.20 allows attackers to cause a denial of service ...)
@@ -18172,22 +18172,22 @@
 CVE-2004-0108 (The isag utility, which processes sysstat data, allows local users to ...)
 	{DSA-460}
 CVE-2004-0099 (mksnap_ffs in FreeBSD 5.1 and 5.2 only sets the snapshot flag when ...)
-	NOTE: not-for-us (freebsd)
+	NOT-FOR-US: freebsd
 CVE-2004-0096 (Unknown vulnerability in mod_python 2.7.9 allows remote attackers to ...)
 	- libapache-mod-python 2:2.7.10
 CVE-2004-0095 (McAfee ePolicy Orchestrator agent allows remote attackers to cause a ...)
-	NOTE: not-for-us (mcafee)
+	NOT-FOR-US: mcafee
 CVE-2004-0094 (Integer signedness errors in XFree86 4.1.0 allow remote attackers to ...)
 	{DSA-443}
 CVE-2004-0093 (XFree86 4.1.0 allows remote attackers to cause a denial of service and ...)
 	{DSA-443}
 CVE-2004-0089 (Buffer overflow in TruBlueEnvironment in Mac OS X 10.3.x and 10.2.x ...)
-	NOTE: not-for-us (os x)
+	NOT-FOR-US: os x
 CVE-2004-0082 (The mksmbpasswd shell script (mksmbpasswd.sh) in Samba 3.0.0 and ...)
 	- samba 3.0.7
 	TODO: test
 CVE-2004-0080 (The login program in util-linux 2.11 and earlier uses a pointer after ...)
-	NOTE: not-for-us (debian uses different login)
+	NOT-FOR-US: debian uses different login
 CVE-2004-0078 (Buffer overflow in the index menu code (menu_pad_string of menu.c) for ...)
 	- mutt 1.5.6-20040722+1
 	TODO: test
@@ -18198,30 +18198,30 @@
 	NOTE: fixed in 2.4.26-pre3
 	TODO: test
 CVE-2004-0070 (PHP remote code injection vulnerability in module.php for ezContents ...)
-	NOTE: not-for-us (ezcontents, commercial)
+	NOT-FOR-US: ezcontents, commercial
 CVE-2004-0068 (PHP remote code injection vulnerability in config.php for PhpDig 1.6.5 ...)
-	NOTE: not-for-us (phpdig, not in debian)
+	NOT-FOR-US: phpdig, not in debian
 CVE-2004-0063 (The SPP_VerifyPVV function in nCipher payShield SPP library 1.3.12, ...)
-	NOTE: not-for-us (ncipher hsm)
+	NOT-FOR-US: ncipher hsm
 CVE-2004-0049 (Helix Universal Server/Proxy 9 and Mobile Server 10 allow remote ...)
-	NOTE: not-for-us (real helix)
+	NOT-FOR-US: real helix
 CVE-2004-0045 (Buffer overflow in the ARTpost function in art.c in the control ...)
 	- inn2 2.4.1+20040820
 	TODO: test
 CVE-2004-0044 (Cisco Personal Assistant 1.4(1) and 1.4(2) disables password ...)
-	NOTE: not-for-us (cisco)
+	NOT-FOR-US: cisco
 CVE-2004-0040 (Stack-based buffer overflow in Check Point VPN-1 Server 4.1 through ...)
-	NOTE: not-for-us (checkpoint)
+	NOT-FOR-US: checkpoint
 CVE-2004-0036 (SQL injection vulnerability in calendar.php for vBulletin Forum 2.3.x ...)
-	NOTE: not-for-us (vbulletin, commercial)
+	NOT-FOR-US: vbulletin, commercial
 CVE-2004-0035 (SQL injection vulnerability in register.php for Phorum 3.4.5 and ...)
-	NOTE: not-for-us (phorum, not in debian)
+	NOT-FOR-US: phorum, not in debian
 CVE-2004-0033 (admin.php in PHPGEDVIEW 2.61 allows remote attackers to obtain ...)
-	NOTE: not-for-us (phpgedview, not in debian)
+	NOT-FOR-US: phpgedview, not in debian
 CVE-2004-0032 (Cross-site scripting (XSS) vulnerability in search.php in PHPGEDVIEW ...)
-	NOTE: not-for-us (phpgedview, not in debian)
+	NOT-FOR-US: phpgedview, not in debian
 CVE-2004-0031 (PHPGEDVIEW 2.61 allows remote attackers to reinstall the software and ...)
-	NOTE: not-for-us (phpgedview, not in debian)
+	NOT-FOR-US: phpgedview, not in debian
 CVE-2004-0028 (jitterbug 1.6.2 does not properly sanitize inputs, which allows remote ...)
 	{DSA-420}
 CVE-2004-0016 (The calendar module for phpgroupware 0.9.14 does not enforce the "save ...)
@@ -18236,20 +18236,20 @@
 	- apache-ssl 1.3.31
 	TODO: test
 CVE-2004-0004 (The libCheckSignature function in crypto-utils.lib for OpenCA 0.9.1.6 ...)
-	NOTE: not-for-us (openca, not in debian)
+	NOT-FOR-US: openca, not in debian
 CVE-2004-0001 (Unknown vulnerability in the eflags checking in the 32-bit ptrace ...)
 	- kernel-image-2.6.8-9-amd64-generic
 	TODO: what version?
 	TODO: test?
 CVE-2003-1328 (The showHelp() function in Microsoft Internet Explorer 5.01, 5.5, and ...)
-	NOTE: not-for-us (windows)
+	NOT-FOR-US: windows
 CVE-2003-1326 (Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers ...)
-	NOTE: not-for-us (windows)
+	NOT-FOR-US: windows
 CVE-2003-1022 (Directory traversal vulnerability in fsp before 2.81.b18 allows remote ...)
 	{DSA-416}
 	- fsp 2.81.b18-1
 CVE-2003-0994 (The GUI functionality for an interactive session in Symantec ...)
-	NOTE: not-for-us (norton)
+	NOT-FOR-US: norton
 CVE-2003-0993 (mod_access in Apache 1.3 before 1.3.30, when running big-endian 64-bit ...)
 	- apache 1.3.29.0.2-4
 CVE-2003-0991 (Unknown vulnerability in the mail command handler in Mailman before ...)
@@ -18266,16 +18266,16 @@
 	{DSA-411}
 	- mpg321 0.2.10.3
 CVE-2003-0966 (Buffer overflow in the frm command in elm 2.5.6 and earlier, and ...)
-	NOTE: not-for-us (elm)
+	NOT-FOR-US: elm
 CVE-2003-0924 (netpbm 9.25 and earlier does not properly create temporary files, ...)
 	{DSA-426}
 	- netpbm-free 2:9.25-9
 CVE-2003-0905 (Unknown vulnerability in Windows Media Station Service and Windows ...)
-	NOTE: not-for-us (microsoft)
+	NOT-FOR-US: microsoft
 CVE-2003-0903 (Buffer overflow in a component of Microsoft Data Access Components ...)
-	NOTE: not-for-us (microsoft)
+	NOT-FOR-US: microsoft
 CVE-2003-0825 (The Windows Internet Naming Service (WINS) for Microsoft Windows ...)
-	NOTE: not-for-us (microsoft)
+	NOT-FOR-US: microsoft
 CVE-2003-0145 (Unknown vulnerability in tcpdump before 3.7.2 related to an inability ...)
 	{DSA-261}
 	- tcpdump 3.7.2-1
@@ -18283,13 +18283,13 @@
 	{DSA-259}
 	- qpopper 4.0.4-9
 CVE-2003-0125 (Buffer overflow in the web interface for SOHO Routefinder 550 before ...)
-	NOTE: not-for-us (SOHO Routefinder)
+	NOT-FOR-US: SOHO Routefinder
 CVE-2003-0124 (man before 1.51 allows attackers to execute arbitrary code via a ...)
-	NOTE: not-for-us (man before 1.51)
+	NOT-FOR-US: man before 1.51
 CVE-2003-0123 (Buffer overflow in Web Retriever client for Lotus Notes/Domino R4.5 ...)
-	NOTE: not-for-us (lotus notes)
+	NOT-FOR-US: lotus notes
 CVE-2003-0122 (Buffer overflow in Notes server before Lotus Notes R4, R5 before ...)
-	NOTE: not-for-us (lotus notes)
+	NOT-FOR-US: lotus notes
 CVE-2003-0120 (adb2mhc in the mhc-utils package before 0.25+20010625-7.1 allows local ...)
 	{DSA-256}
 	- mhc 0.25+20030224-1
@@ -18299,39 +18299,39 @@
 CVE-2003-0107 (Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is ...)
 	- zlib 1:1.1.4-10	
 CVE-2003-0104 (Directory traversal vulnerability in PeopleTools 8.10 through 8.18, ...)
-	NOTE: not-for-us (peopletools)
+	NOT-FOR-US: peopletools
 CVE-2003-0103 (Format string vulnerability in Nokia 6210 handset allows remote ...)
-	NOTE: not-for-us (nokia handset)
+	NOT-FOR-US: nokia handset
 CVE-2003-0102 (Buffer overflow in tryelf() in readelf.c of the file command allows ...)
 	{DSA-260}
 	- file 3.40-1.1
 CVE-2003-0100 (Buffer overflow in Cisco IOS 11.2.x to 12.0.x allows remote attackers ...)
-	NOTE: not-for-us (cisco)
+	NOT-FOR-US: cisco
 CVE-2003-0097 (Unknown vulnerability in CGI module for PHP 4.3.0 allows attackers to ...)
 	- php4 4:4.3.2+rc3-1
 CVE-2003-0095 (Buffer overflow in ORACLE.EXE for Oracle Database Server 9i, 8i, ...)
-	NOTE: not-for-us (oracle)
+	NOT-FOR-US: oracle
 CVE-2003-0094 (A patch for mcookie in the util-linux package for Mandrake Linux 8.2 ...)
-	NOTE: not-for-us (mandrake specific)
+	NOT-FOR-US: mandrake specific
 CVE-2003-0093 (The RADIUS decoder in tcpdump 3.6.2 and earlier allows remote ...)
 	{DSA-261}
 	- tcpdump 3.7.1-1
 CVE-2003-0088 (TruBlueEnvironment for MacOS 10.2.3 and earlier allows local users to ...)
-	NOTE: not-for-us (macosX)
+	NOT-FOR-US: macosX
 CVE-2003-0087 (Buffer overflow in libIM library (libIM.a) for National Language ...)
-	NOTE: not-for-us (AIX)
+	NOT-FOR-US: AIX
 CVE-2003-0081 (Format string vulnerability in packet-socks.c of the SOCKS dissector ...)
 	{DSA-258}
 	- ethereal 0.9.9-2
 CVE-2003-0079 (The DEC UDK processing feature in the hanterm (hanterm-xf) terminal ...)
-	NOTE: not-for-us (hanterm before 2.0.5)
+	NOT-FOR-US: hanterm before 2.0.5
 CVE-2003-0078 (ssl3_get_record in s3_pkt.c for OpenSSL before 0.9.7a and 0.9.6 before ...)
 	{DSA-253}
 	- openssl 0.9.7a-1
 CVE-2003-0077 (The hanterm (hanterm-xf) terminal emulator 2.0.5 and earlier, and ...)
-	NOTE: not-for-us (hanterm before 2.0.5)
+	NOT-FOR-US: hanterm before 2.0.5
 CVE-2003-0075 (Integer signedness error in the myFseek function of samplein.c for ...)
-	NOTE: not-for-us (blade encoder not in Debian)
+	NOT-FOR-US: blade encoder not in Debian
 CVE-2003-0073 (Double-free vulnerability in mysqld for MySQL before 3.23.55 allows ...)
 	{DSA-303}
 	- mysql 4.0.12-2
@@ -18354,32 +18354,32 @@
 	- rxvt 1:2.6.4-6.1 (bug #244810)
 	NOTE: woody version is still vulnerable
 CVE-2003-0065 (The uxterm terminal emulator allows attackers to modify the window ...)
-	NOTE: not-for-us (uxterm not in Debian)
+	NOT-FOR-US: uxterm not in Debian
 CVE-2003-0064 (The dtterm terminal emulator allows attackers to modify the window ...)
-	NOTE: not-for-us (dtterm not in Debian)
+	NOT-FOR-US: dtterm not in Debian
 CVE-2003-0063 (The xterm terminal emulator in XFree86 4.2.0 and earlier allows ...)
 	{DSA-380}
 	- xfree86 4.2.1-11
 CVE-2003-0062 (Buffer overflow in Eset Software NOD32 for UNIX before 1.013 allows ...)
-	NOTE: not-for-us (NOD32 not in Debian)
+	NOT-FOR-US: NOD32 not in Debian
 CVE-2003-0059 (Unknown vulnerability in the chk_trans.c of the libkrb5 library for ...)
 	- krb5 1.2.5-1
 CVE-2003-0058 (MIT Kerberos V5 Key Distribution Center (KDC) before 1.2.5 allows ...)
 	- krb5 1.2.5-1
 CVE-2003-0055 (Buffer overflow in the MP3 broadcasting module of Apple Darwin ...)
-	NOTE: not-for-us (apple)
+	NOT-FOR-US: apple
 CVE-2003-0054 (Apple Darwin Streaming Administration Server 4.1.2 and QuickTime ...)
-	NOTE: not-for-us (apple)
+	NOT-FOR-US: apple
 CVE-2003-0053 (Cross-site scripting (XSS) vulnerability in parse_xml.cgi in Apple ...)
-	NOTE: not-for-us (apple)
+	NOT-FOR-US: apple
 CVE-2003-0052 (parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 ...)
-	NOTE: not-for-us (apple)
+	NOT-FOR-US: apple
 CVE-2003-0051 (parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 ...)
-	NOTE: not-for-us (apple)
+	NOT-FOR-US: apple
 CVE-2003-0050 (parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 ...)
-	NOTE: not-for-us (apple)
+	NOT-FOR-US: apple
 CVE-2003-0045 (Jakarta Tomcat before 3.3.1a on certain Windows systems may allow ...)
-	NOTE: not-for-us (windows)
+	NOT-FOR-US: windows
 CVE-2003-0043 (Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, ...)
 	{DSA-246}
 	- tomcat 3.3.1a-1
@@ -18396,7 +18396,7 @@
 	{DSA-228}
 	- libmcrypt 2.5.5-1
 CVE-2003-0027 (Directory traversal vulnerability in Sun Kodak Color Management System ...)
-	NOTE: not-for-us (sun)
+	NOT-FOR-US: sun
 CVE-2003-0024 (The menuBar feature in aterm 0.42 allows attackers to modify menu ...)
 	NOTE: I have mailed Goran Weinholt <weinholt at debian.org> about this. 
 	NOTE: Goran Weinholt <weinholt at debian.org> tell me that aterm 0.4.2 was 
@@ -18414,14 +18414,14 @@
 	- apache2 2.0.49
 	- apache 1.3.29.0.2-4
 CVE-2003-0019 (uml_net in the kernel-utils package for Red Hat Linux 8.0 has ...)
-	NOTE: not-for-us (redhat 8.0 only)
+	NOT-FOR-US: redhat 8.0 only
 CVE-2003-0018 (Linux kernel 2.4.10 through 2.4.21-pre4 does not properly handle the ...)
 	{DSA-423 DSA-358}
 	NOTE: fixed after 2.6/2.4.21 kernel
 CVE-2003-0017 (Apache 2.0 before 2.0.44 on Windows platforms allows remote attackers ...)
-	NOTE: not-for-us (apache on windows)
+	NOT-FOR-US: apache on windows
 CVE-2003-0016 (Apache before 2.0.44, when running on unpatched Windows 9x and Me ...)
-	NOTE: not-for-us (apache on windows)
+	NOT-FOR-US: apache on windows
 CVE-2003-0015 (Double-free vulnerabiity in CVS 1.11.4 and earlier allows remote ...)
 	{DSA-233}
 	- cvs 1.11.2-5.1
@@ -18432,37 +18432,37 @@
 	{DSA-230}
 	- bugzilla 2.16.2-1
 CVE-2003-0009 (Cross-site scripting (XSS) vulnerability in Help and Support Center ...)
-	NOTE: not-for-us (windows)
+	NOT-FOR-US: windows
 CVE-2003-0007 (Microsoft Outlook 2002 does not properly handle requests to encrypt ...)
-	NOTE: not-for-us (windows)
+	NOT-FOR-US: windows
 CVE-2003-0004 (Buffer overflow in the Windows Redirector function in Microsoft ...)
-	NOTE: not-for-us (windows)
+	NOT-FOR-US: windows
 CVE-2003-0003 (Buffer overflow in the RPC Locator service for Microsoft Windows NT ...)
-	NOTE: not-for-us (windows)
+	NOT-FOR-US: windows
 CVE-2003-0002 (Cross-site scripting vulnerability (XSS) in ManualLogin.asp script for ...)
-	NOTE: not-for-us (windows)
+	NOT-FOR-US: windows
 CVE-2002-1574 (Buffer overflow in the ixj telephony card driver in Linux before ...)
 	NOTE: fixed after 2.6/2.4.20 kernel
 CVE-2002-1560 (index.php in gBook 1.4 allows remote attackers to bypass ...)
-	NOTE: not-for-us (gbook not in Debian)
+	NOT-FOR-US: gbook not in Debian
 CVE-2002-1552 (Novell eDirectory (eDir) 8.6.2 and Netware 5.1 eDir 85.x allows users ...)
-	NOTE: not-for-us (novell)
+	NOT-FOR-US: novell
 CVE-2002-1550 (dump_smutil.sh in IBM AIX allows local users to overwrite arbitrary ...)
-	NOTE: not-for-us (AIX)
+	NOT-FOR-US: AIX
 CVE-2002-1549 (Buffer overflow in Light HTTPd (lhttpd) 0.1 allows remote attackers to ...)
-	NOTE: not-for-us (lhttpd not in Debian)
+	NOT-FOR-US: lhttpd not in Debian
 CVE-2002-1548 (Unknown vulnerability in autofs on AIX 4.3.0, when using executable ...)
-	NOTE: not-for-us (AIX)
+	NOT-FOR-US: AIX
 CVE-2002-1547 (Netscreen running ScreenOS 4.0.0r6 and earlier allows remote attackers ...)
-	NOTE: not-for-us (Netscreen)
+	NOT-FOR-US: Netscreen
 CVE-2002-1543 (Buffer overflow in trek on NetBSD 1.5 through 1.5.3 allows local users ...)
-	NOTE: not-for-us (NetBSD)
+	NOT-FOR-US: NetBSD
 CVE-2002-1541 (BadBlue 1.7 allows remote attackers to bypass password protections for ...)
-	NOTE: not-for-us (BadBlue not in Debian)
+	NOT-FOR-US: BadBlue not in Debian
 CVE-2002-1540 (The client for Symantec Norton AntiVirus Corporate Edition 7.5.x ...)
-	NOTE: not-for-us (norton)
+	NOT-FOR-US: norton
 CVE-2002-1538 (Acuma Acusend 4, and possibly earlier versions, allows remote ...)
-	NOTE: not-for-us (acusend not in Debian)
+	NOT-FOR-US: acusend not in Debian
 CVE-2002-1537 (admin_ug_auth.php in phpBB 2.0.0 allows local users to gain ...)
 	- phpbb2 2.0.6c-1
 	NOTE: according to http://www.securityfocus.com/archive/1/297419
@@ -18472,57 +18472,57 @@
 	NOTE: see: http://www.securityfocus.com/archive/1/294206
 	TODO: check
 CVE-2002-1532 (The administrative web interface (STEMWADM) for SurfControl SuperScout ...)
-	NOTE: not-for-us (surfcontrol)
+	NOT-FOR-US: surfcontrol
 CVE-2002-1531 (The administrative web interface (STEMWADM) for SurfControl SuperScout ...)
-	NOTE: not-for-us (surfcontrol)
+	NOT-FOR-US: surfcontrol
 CVE-2002-1530 (The administrative web interface (STEMWADM) for SurfControl SuperScout ...)
-	NOTE: not-for-us (surfcontrol)
+	NOT-FOR-US: surfcontrol
 CVE-2002-1529 (Cross-site scripting (XSS) vulnerability in msgError.asp for the ...)
-	NOTE: not-for-us (surfcontrol)
+	NOT-FOR-US: surfcontrol
 CVE-2002-1528 (MsmMask.exe in MondoSearch 4.4 allows remote attackers to obtain the ...)
-	NOTE: not-for-us (mondosearch)
+	NOT-FOR-US: mondosearch
 CVE-2002-1524 (Buffer overflow in XML parser in wsabi.dll of Winamp 3 (1.0.0.488) ...)
-	NOTE: not-for-us (winamp)
+	NOT-FOR-US: winamp
 CVE-2002-1521 (Web Server 4D (WS4D) 3.6 stores passwords in plaintext in the Ws4d.4DD ...)
-	NOTE: not-for-us (webserver 4D)
+	NOT-FOR-US: webserver 4D
 CVE-2002-1520 (The CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and ...)
-	NOTE: not-for-us (WatchGuard)
+	NOT-FOR-US: WatchGuard
 CVE-2002-1519 (Format string vulnerability in the CLI interface for WatchGuard ...)
-	NOTE: not-for-us (WatchGuard)
+	NOT-FOR-US: WatchGuard
 CVE-2002-1518 (mv in IRIX 6.5 creates a directory with world-writable permissions ...)
-	NOTE: not-for-us (IRIX)
+	NOT-FOR-US: IRIX
 CVE-2002-1517 (fsr_efs in IRIX 6.5 allows local users to conduct unauthorized file ...)
-	NOTE: not-for-us (IRIX)
+	NOT-FOR-US: IRIX
 CVE-2002-1516 (rpcbind in SGI IRIX, when using the -w command line switch, allows ...)
-	NOTE: not-for-us (IRIX)
+	NOT-FOR-US: IRIX
 CVE-2002-1514 (gds_lock_mgr in Borland InterBase allows local users to overwrite ...)
-	NOTE: not-for-us (interbase)
+	NOT-FOR-US: interbase
 CVE-2002-1513 (The UCX POP server in HP TCP/IP services for OpenVMS 4.2 through 5.3 ...)
-	NOTE: not-for-us (OpenVMS)
+	NOT-FOR-US: OpenVMS
 CVE-2002-1511 (The vncserver wrapper for vnc before 3.3.3r2-21 uses the rand() ...)
 	- vnc 3.3.3r2-21
 CVE-2002-1510 (xdm, with the authComplain variable set to false, allows arbitrary ...)
 	- xfree86 4.1.0-7
 CVE-2002-1509 (A patch for shadow-utils 20000902 causes the useradd command to create ...)
-	NOTE: not-for-us (redhat and mandrake only)
+	NOT-FOR-US: redhat and mandrake only
 CVE-2002-1505 (SQL injection vulnerability in board.php for WoltLab Burning Board ...)
-	NOTE: not-for-us (WoltLab Burning Board not in Debian)
+	NOT-FOR-US: WoltLab Burning Board not in Debian
 CVE-2002-1502 (Symbolic link vulnerability in xbreaky before 0.5.5 allows local users ...)
-	NOTE: not-for-us (xbreaky not in Debian)
+	NOT-FOR-US: xbreaky not in Debian
 CVE-2002-1501 (The MPS functionality in Enterasys SSR8000 (Smart Switch Router) ...)
-	NOTE: not-for-us (Enterasys)
+	NOT-FOR-US: Enterasys
 CVE-2002-1497 (Cross-site scripting (XSS) vulnerability in Null HTTP Server 0.5.0 and ...)
-	NOTE: not-for-us (Null HTTP Server not in Debian)
+	NOT-FOR-US: Null HTTP Server not in Debian
 CVE-2002-1496 (Heap-based buffer overflow in Null HTTP Server 0.5.0 and earlier ...)
-	NOTE: not-for-us (Null HTTP Server not in Debian)
+	NOT-FOR-US: Null HTTP Server not in Debian
 CVE-2002-1494 (Cross-site scripting (XSS) vulnerabilities in Aestiva HTML/OS allows ...)
-	NOTE: not-for-us (Aestiva)
+	NOT-FOR-US: Aestiva
 CVE-2002-1493 (Cross-site scripting (XSS) vulnerability in Lycos HTMLGear guestbook ...)
-	NOTE: not-for-us (Lycos)
+	NOT-FOR-US: Lycos
 CVE-2002-1491 (The Cisco VPN 5000 Client for MacOS before 5.2.2 records the most ...)
-	NOTE: not-for-us (Cisco VPN 5000 Client for MacOS)
+	NOT-FOR-US: Cisco VPN 5000 Client for MacOS
 CVE-2002-1490 (NetBSD 1.4 through 1.6 beta allows local users to cause a denial of ...)
-	NOTE: not-for-us (NetBSD)
+	NOT-FOR-US: NetBSD
 CVE-2002-1479 (Cacti before 0.6.8 stores a MySQL username and password in plaintext ...)
 	- cacti 0.6.8-1
 CVE-2002-1478 (Cacti before 0.6.8 allows attackers to execute arbitrary commands via ...)
@@ -18532,7 +18532,7 @@
 	{DSA-164}
 	- cacti 0.6.8a-2
 CVE-2002-1476 (Buffer overflow in setlocale in libc on NetBSD 1.4.x through 1.6, and ...)
-	NOTE: not-for-us (NetBSD)
+	NOT-FOR-US: NetBSD
 CVE-2002-1472 (libX11.so in xfree86, when used in setuid or setgid programs, allows ...)
 	- xfree86 4.2.1-1
 	NOTE: Accordong to http://www.securityfocus.com/bid/5735/info/
@@ -18547,46 +18547,46 @@
 	NOTE: according to http://sublimation.org/scponly/ (scponly home page)
 	NOTE: only versions of scponly older than scponly-2.4 are affected
 CVE-2002-1468 (Buffer overflow in errpt in AIX 4.3.3 allows local users to execute ...)
-	NOTE: not-for-us (AIX)
+	NOT-FOR-US: AIX
 CVE-2002-1463 (Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and ...)
-	NOTE: not-for-us (symantec)
+	NOT-FOR-US: symantec
 CVE-2002-1448 (An undocumented SNMP read/write community string ('NoGaH$@!') in Avaya ...)
-	NOTE: not-for-us (Avaya P330, P130, and M770-ATM Cajun products)
+	NOT-FOR-US: Avaya P330, P130, and M770-ATM Cajun products
 CVE-2002-1447 (Buffer overflow in the vpnclient program for UNIX VPN Client before ...)
-	NOTE: not-for-us (Cisco vpn client for UNIX)
+	NOT-FOR-US: Cisco vpn client for UNIX
 CVE-2002-1446 (The error checking routine used for the C_Verify call on a symmetric ...)
-	NOTE: not-for-us (nCipher PKCS#11 library)
+	NOT-FOR-US: nCipher PKCS#11 library
 CVE-2002-1443 (The Google toolbar 1.1.58 and earlier allows remote web sites to ...)
-	NOTE: not-for-us (Google toolbar)
+	NOT-FOR-US: Google toolbar
 CVE-2002-1438 (The web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 ...)
-	NOTE: not-for-us (Perl on Novell)
+	NOT-FOR-US: Perl on Novell
 CVE-2002-1437 (Directory traversal vulnerability in the web handler for Perl 5.003 on ...)
-	NOTE: not-for-us (Perl on Novell)
+	NOT-FOR-US: Perl on Novell
 CVE-2002-1436 (The web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 ...)
-	NOTE: not-for-us (Perl on Novell)
+	NOT-FOR-US: Perl on Novell
 CVE-2002-1435 (class.atkdateattribute.js.php in Achievo 0.7.0 through 0.9.1, except ...)
-	NOTE: not-for-us (Achievo not in Debian)
+	NOT-FOR-US: Achievo not in Debian
 CVE-2002-1430 (Unknown vulnerability in Sympoll 1.2 allows remote attackers to read ...)
-	NOTE: not-for-us (Sympoll not in Debian)
+	NOT-FOR-US: Sympoll not in Debian
 CVE-2002-1425 (Directory traversal vulnerability in munpack in mpack 1.5 and earlier ...)
 	{DSA-141}
 	- mpack 1.5-9
 CVE-2002-1424 (Buffer overflow in munpack in mpack 1.5 and earlier allows remote ...)
 	- mpack 1.5-9
 CVE-2002-1420 (Integer signedness error in select() on OpenBSD 3.1 and earlier allows ...)
-	NOTE: not-for-us (OpenBSD)
+	NOT-FOR-US: OpenBSD
 CVE-2002-1419 (The upgrade of IRIX on Origin 3000 to 6.5.13 through 6.5.16 changes ...)
-	NOTE: not-for-us (IRIX on Origin)
+	NOT-FOR-US: IRIX on Origin
 CVE-2002-1418 (Buffer overflow in the interpreter for Novell NetBasic Scripting ...)
-	NOTE: not-for-us (Novell NetBasic Scripting Server)
+	NOT-FOR-US: Novell NetBasic Scripting Server
 CVE-2002-1417 (Directory traversal vulnerability in Novell NetBasic Scripting Server ...)
-	NOTE: not-for-us (Novell NetBasic Scripting Server)
+	NOT-FOR-US: Novell NetBasic Scripting Server
 CVE-2002-1414 (Buffer overflow in qmailadmin allows local users to gain privileges ...)
 	- qmailadmin 1.0.6-1
 CVE-2002-1413 (RCONAG6 for Novell Netware SP2, while running RconJ in secure mode, ...)
-	NOTE: not-for-us (RCONAG6 for Novell Netware SP2)
+	NOT-FOR-US: RCONAG6 for Novell Netware SP2
 CVE-2002-1407 (TinySSL 1.02 and earlier does not verify the Basic Constraints for an ...)
-	NOTE: not-for-us (TinySSL not in Debian)
+	NOT-FOR-US: TinySSL not in Debian
 CVE-2002-1405 (CRLF injection vulnerability in Lynx 2.8.4 and earlier allows remote ...)
 	{DSA-210}
 	- lynx 2.8.4.1b-4
@@ -18683,14 +18683,14 @@
 	- micq 0.4.9.4-1
 	NOTE: micq not in sarge
 CVE-2002-1361 (overflow.cgi CGI script in Sun Cobalt RaQ 4 with the SHP (Security ...)
-	NOTE: not-for-us (sun)
+	NOT-FOR-US: sun
 CVE-2002-1350 (The BGP decoding routines in tcpdump 3.6.x before 3.7 do not properly ...)
 	{DSA-206}
 	- tcpdump 3.7.1-1
 	NOTE: 3.7.1-1.2 fixes a different issue.
 	NOTE: The fix from 3.6.2-2.2 was not upload to unstable.
 CVE-2002-1349 (Buffer overflow in pop3trap.exe for PC-cillin 2000, 2002, and 2003 ...)
-	NOTE: not-for-us (PC-cillin)
+	NOT-FOR-US: PC-cillin
 CVE-2002-1348 (w3m before 0.3.2.2 does not properly escape HTML tags in the ALT ...)
 	{DSA-251 DSA-250 DSA-249}
 	- w3mmee 0.3.p24.17-3
@@ -18702,14 +18702,14 @@
 CVE-2002-1336 (TightVNC before 1.2.6 generates the same challenge string for multiple ...)
 	- tightvnc 1.2.6-1
 CVE-2002-1327 (Buffer overflow in the Windows Shell function in Microsoft Windows XP ...)
-	NOTE: not-for-us (windows)
+	NOT-FOR-US: windows
 CVE-2002-1325 (Microsoft Virtual Machine (VM) build 5.0.3805 and earlier allows ...)
-	NOTE: not-for-us (windows)
+	NOT-FOR-US: windows
 CVE-2002-1323 (Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may ...)
 	{DSA-208}
 	- perl 5.8.0-14
 CVE-2002-1320 (Pine 4.44 and earlier allows remote attackers to cause a denial of ...)
-	NOTE: not-for-us (pine not in Debian)
+	NOT-FOR-US: pine not in Debian
 CVE-2002-1319 (The Linux kernel 2.4.20 and earlier, and 2.5.x, when running on x86 ...)
 	NOTE: fixed after 2.4.20 kernel (2.6 not vulnerable)
 CVE-2002-1318 (Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers ...)
@@ -18717,7 +18717,7 @@
 	- samba 2.99.cvs.20020713-1
 	NOTE: Problem in Samba 2, sarge uses Samba 3.
 CVE-2002-1317 (Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on ...)
-	NOTE: not-for-us (solaris)
+	NOT-FOR-US: solaris
 CVE-2002-1313 (nullmailer 1.00RC5 and earlier allows local users to cause a denial of ...)
 	{DSA-198}
 	- nullmailer 1.00RC5-17
@@ -18731,7 +18731,7 @@
 	{DSA-199}
 	- mhonarc 2.5.13-1
 CVE-2002-1296 (Directory traversal vulnerability in priocntl system call in Solaris ...)
-	NOTE: not-for-us (Solaris)
+	NOT-FOR-US: Solaris
 CVE-2002-1284 (The wizard in KGPG 0.6 through 0.8.2 does not properly provide the ...)
 	- kdeutils 4:3.2.1-1
 CVE-2002-1278 (The mailconf module in Linuxconf 1.24, and other versions before 1.28, ...)
@@ -18740,61 +18740,61 @@
 	{DSA-190}
 	- wmaker 0.80.1-1
 CVE-2002-1272 (Alcatel OmniSwitch 7700/7800 switches running AOS 5.1.1 contains a ...)
-	NOTE: not-for-us (Alcatel)
+	NOT-FOR-US: Alcatel
 CVE-2002-1271 (The Mail::Mailer Perl module in the perl-MailTools package 1.47 and ...)
 	{DSA-386}
 	- libmailtools-perl 1.51
 CVE-2002-1270 (Mac OS X 10.2.2 allows local users to read files that only allow write ...)
-	NOTE: not-for-us (Mac OS X)
+	NOT-FOR-US: Mac OS X
 CVE-2002-1268 (Mac OS X 10.2.2 allows local users to gain privileges via a mounted ...)
-	NOTE: not-for-us (Mac OS X)
+	NOT-FOR-US: Mac OS X
 CVE-2002-1267 (Mac OS X 10.2.2 allows remote attackers to cause a denial of service ...)
-	NOTE: not-for-us (Mac OS X)
+	NOT-FOR-US: Mac OS X
 CVE-2002-1266 (Mac OS X 10.2.2 allows local users to gain privileges by mounting a ...)
-	NOTE: not-for-us (Mac OS X)
+	NOT-FOR-US: Mac OS X
 CVE-2002-1265 (The Sun RPC functionality in multiple libc implementations does not ...)
 	NOTE: don't know which version of glibc fix this
 	NOTE: I've mailed maintainers.
 	TODO: check
 CVE-2002-1264 (Buffer overflow in Oracle iSQL*Plus web application of the Oracle 9 ...)
-	NOTE: not-for-us (oracle)
+	NOT-FOR-US: oracle
 CVE-2002-1260 (The Java Database Connectivity (JDBC) APIs in Microsoft Virtual ...)
-	NOTE: not-for-us (Microsoft JVM)
+	NOT-FOR-US: Microsoft JVM
 CVE-2002-1257 (Microsoft Virtual Machine (VM) up to and including build 5.0.3805 ...)
-	NOTE: not-for-us (Microsoft JVM)
+	NOT-FOR-US: Microsoft JVM
 CVE-2002-1256 (The SMB signing capability in the Server Message Block (SMB) protocol ...)
-	NOTE: not-for-us (Microsoft Windows)
+	NOT-FOR-US: Microsoft Windows
 CVE-2002-1255 (Microsoft Outlook 2002 allows remote attackers to cause a denial of ...)
-	NOTE: not-for-us (Microsoft Outlook)
+	NOT-FOR-US: Microsoft Outlook
 CVE-2002-1253 (Abuse 2.00 and earlier allows local users to gain privileges via ...)
-	NOTE: not-for-us (Abuse 2.00 not in Debian)
+	NOT-FOR-US: Abuse 2.00 not in Debian
 CVE-2002-1252 (The Application Messaging Gateway for PeopleTools 8.1x before 8.19, as ...)
-	NOTE: not-for-us (PeopleSoft)
+	NOT-FOR-US: PeopleSoft
 CVE-2002-1251 (Buffer overflow in log2mail before 0.2.5.1 allows remote attackers to ...)
 	{DSA-186}
 	- log2mail 0.2.6-1
 CVE-2002-1250 (Buffer overflow in Abuse 2.00 and earlier allows local users to gain ...)
-	NOTE: not-for-us (Abuse 2.00 not in Debian)
+	NOT-FOR-US: Abuse 2.00 not in Debian
 CVE-2002-1248 (Northern Solutions Xeneo Web Server 2.1.0.0, 2.0.759.6, and other ...)
-	NOTE: not-for-us (Xeneo Web Server)
+	NOT-FOR-US: Xeneo Web Server
 CVE-2002-1245 (Maped in LuxMan 0.41 uses the user-provided search path to find and ...)
 	{DSA-189}
 	- luxman 0.41-19
 CVE-2002-1244 (Format string vulnerability in Pablo FTP Server 1.5, 1.3, and possibly ...)
-	NOTE: not-for-us (Pablo FTP Server)
+	NOT-FOR-US: Pablo FTP Server
 CVE-2002-1242 (SQL injection vulnerability in PHP-Nuke before 6.0 allows remote ...)
-	NOTE: not-for-us (PHP-Nuke not in Debian)
+	NOT-FOR-US: PHP-Nuke not in Debian
 CVE-2002-1239 (QNX Neutrino RTOS 6.2.0 uses the PATH environment variable to find and ...)
-	NOTE: not-for-us (QNX)
+	NOT-FOR-US: QNX
 CVE-2002-1236 (The remote management web server for Linksys BEFSR41 EtherFast ...)
-	NOTE: not-for-us (Linksys)
+	NOT-FOR-US: Linksys
 CVE-2002-1232 (Memory leak in ypdb_open in yp_db.c for ypserv before 2.5 in the NIS ...)
 	{DSA-180}
 	- nis 3.9-6.2
 CVE-2002-1231 (SCO UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to cause a ...)
-	NOTE: not-for-us (SCO)
+	NOT-FOR-US: SCO
 CVE-2002-1230 (NetDDE Agent on Windows NT 4.0, 4.0 Terminal Server Edition, Windows ...)
-	NOTE: not-for-us (Windows NT)
+	NOT-FOR-US: Windows NT
 CVE-2002-1227 (PAM 0.76 treats a disabled password as if it were an empty (null) ...)
 	{DSA-177}
 	- pam 0.76-6
@@ -18803,7 +18803,7 @@
 CVE-2002-1223 (Buffer overflow in DSC 3.0 parser from GSview, as used in KGhostView ...)
 	- kdegraphics 4:3.1.0-1
 CVE-2002-1222 (Buffer overflow in the embedded HTTP server for Cisco Catalyst ...)
-	NOTE: not-for-us (CISCO)
+	NOT-FOR-US: CISCO
 CVE-2002-1221 (BIND 8.x through 8.3.3 allows remote attackers to cause a denial of ...)
 	{DSA-196}
 	- bind 1:8.3.3-3
@@ -18816,12 +18816,12 @@
 CVE-2002-1214 (Buffer overflow in Microsoft PPTP Service on Windows XP and Windows ...)
 	NOT-FOR-US: Microsoft
 CVE-2002-1211 (Prometheus 6.0 and earlier allows remote attackers to execute ...)
-	NOTE: not-for-us (Prometheus not in Debian)
+	NOT-FOR-US: Prometheus not in Debian
 CVE-2002-1200 (Balabit Syslog-NG 1.4.x before 1.4.15, and 1.5.x before 1.5.20, when ...)
 	{DSA-175}
 	- syslog-ng 1.5.21-1
 CVE-2002-1199 (The getdbm procedure in ypxfrd allows local users to read arbitrary ...)
-	NOTE: not-for-us (ypxfrd not in Debian)
+	NOT-FOR-US: ypxfrd not in Debian
 CVE-2002-1198 (Bugzilla 2.16.x before 2.16.1 does not properly filter apostrophes ...)
 	- bugzilla 2.16.1-1
 	NOTE: woody seems to be vulnerable, bug #282500
@@ -18839,7 +18839,7 @@
 	{DSA-172}
 	NOTE: tkmail not in testing/unstable
 CVE-2002-1189 (The default configuration of Cisco Unity 2.x and 3.x does not block ...)
-	NOTE: not-for-us (CISCO)
+	NOT-FOR-US: CISCO
 CVE-2002-1188 (Internet Explorer 5.01 through 6.0 allows remote attackers to identify ...)
 	NOT-FOR-US: Microsoft
 CVE-2002-1187 (Cross-site scripting vulnerability (XSS) in Internet Explorer 5.01 ...)
@@ -18863,9 +18863,9 @@
 CVE-2002-1170 (The handle_var_requests function in snmp_agent.c for the SNMP daemon ...)
 	- net-snmp 5.0.6
 CVE-2002-1169 (IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before ...)
-	NOTE: not-for-us (IBM Web Traffic Express Caching Proxy Server)
+	NOT-FOR-US: IBM Web Traffic Express Caching Proxy Server
 CVE-2002-1160 (The default configuration of the pam_xauth module forwards ...)
-	NOTE: not-for-us (pam_xauth)
+	NOT-FOR-US: pam_xauth
 CVE-2002-1159 (Canna 3.6 and earlier does not properly validate requests, which ...)
 	{DSA-224}
 CVE-2002-1158 (Buffer overflow in the irw_through function for Canna 3.5b2 and ...)
@@ -18877,7 +18877,7 @@
 CVE-2002-1154 (anlgform.pl in Analog before 5.23 does not restrict access to the ...)
 	- analog 2:5.23
 CVE-2002-1153 (IBM Websphere 4.0.3 allows remote attackers to cause a denial of ...)
-	NOTE: not-for-us (IBM Websphere)
+	NOT-FOR-US: IBM Websphere
 CVE-2002-1152 (Konqueror in KDE 3.0 through 3.0.2 does not properly detect the ...)
 	- konqueror 3.03
 CVE-2002-1151 (The cross-site scripting protection for Konqueror in KDE 2.2.2 and 3.0 ...)
@@ -18885,7 +18885,7 @@
 CVE-2002-1148 (The default servlet (org.apache.catalina.servlets.DefaultServlet) in ...)
 	{DSA-170}
 CVE-2002-1147 (The HTTP administration interface for HP Procurve 4000M Switch ...)
-	NOTE: not-for-us (HP Procurve 4000M Switch firmware)
+	NOT-FOR-US: HP Procurve 4000M Switch firmware
 CVE-2002-1146 (The BIND 4 and BIND 8.2.x stub resolver libraries, and other libraries ...)
 	NOTE: see http://www.kb.cert.org/vuls/id/AAMN-5D28K6 (glibc)
 	NOTE: see http://www.kb.cert.org/vuls/id/AAMN-5D287U (bind)
@@ -18894,9 +18894,9 @@
 CVE-2002-1142 (Heap-based buffer overflow in the Remote Data Services (RDS) component ...)
 	NOT-FOR-US: Microsoft
 CVE-2002-1141 (An input validation error in the Sun Microsystems RPC library Services ...)
-	NOTE: not-for-us (Sun Microsystems RPC library Services for Unix 3.0 Interix SD, as implemented on Microsoft Windows NT4, 2000, and XP)
+	NOT-FOR-US: Sun Microsystems RPC library Services for Unix 3.0 Interix SD, as implemented on Microsoft Windows NT4, 2000, and XP
 CVE-2002-1140 (The Sun Microsystems RPC library Services for Unix 3.0 Interix SD, as ...)
-	NOTE: not-for-us (Sun Microsystems RPC library Services for Unix 3.0 Interix SD, as implemented on Microsoft Windows NT4, 2000, and XP)
+	NOT-FOR-US: Sun Microsystems RPC library Services for Unix 3.0 Interix SD, as implemented on Microsoft Windows NT4, 2000, and XP
 CVE-2002-1139 (The Compressed Folders feature in Microsoft Windows 98 with Plus! ...)
 	NOT-FOR-US: Microsoft
 CVE-2002-1138 (Microsoft SQL Server 7.0 and 2000, including Microsoft Data Engine ...)
@@ -18904,7 +18904,7 @@
 CVE-2002-1137 (Buffer overflow in the Database Console Command (DBCC) that handles ...)
 	NOT-FOR-US: Microsoft
 CVE-2002-1135 (modsecurity.php 1.10 and earlier, in phpWebSite 0.8.2 and earlier, ...)
-	NOTE: not-for-us (phpWebSite)
+	NOT-FOR-US: phpWebSite
 CVE-2002-1132 (SquirrelMail 1.2.7 and earlier allows remote attackers to determine ...)
 	{DSA-191}
 CVE-2002-1126 (Mozilla 1.1 and earlier, and Mozilla-based browsers such as Netscape ...)
@@ -18916,9 +18916,9 @@
 CVE-2002-1119 (os._execvpe from os.py in Python 2.2.1 and earlier creates temporary ...)
 	{DSA-159}
 CVE-2002-1118 (TNS Listener in Oracle Net Services for Oracle 9i 9.2.x and 9.0.x, and ...)
-	NOTE: not-for-us (Oracle)
+	NOT-FOR-US: Oracle
 CVE-2002-1117 (Veritas Backup Exec 8.5 and earlier requires that the ...)
-	NOTE: not-for-us (Veritas Backup Exec)
+	NOT-FOR-US: Veritas Backup Exec
 CVE-2002-1116 (The &quot;View Bugs&quot; page (view_all_bug_page.php) in Mantis 0.17.4a and ...)
 	{DSA-161}
 CVE-2002-1113 (summary_graph_functions.php in Mantis 0.17.3 and earlier allows remote ...)
@@ -18930,53 +18930,53 @@
 CVE-2002-1109 (securetar, as used in AMaViS shell script 0.2.1 and earlier, allows ...)
 	NOTE: old amavis shell script
 CVE-2002-1108 (Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x ...)
-	NOTE: not-for-us (Cisco)
+	NOT-FOR-US: Cisco
 CVE-2002-1107 (Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x ...)
-	NOTE: not-for-us (Cisco)
+	NOT-FOR-US: Cisco
 CVE-2002-1106 (Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x ...)
-	NOTE: not-for-us (Cisco)
+	NOT-FOR-US: Cisco
 CVE-2002-1105 (Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x ...)
-	NOTE: not-for-us (Cisco)
+	NOT-FOR-US: Cisco
 CVE-2002-1104 (Cisco Virtual Private Network (VPN) Client software 2.x.x and 3.x ...)
-	NOTE: not-for-us (Cisco)
+	NOT-FOR-US: Cisco
 CVE-2002-1102 (The LAN-to-LAN IPSEC capability for Cisco VPN 3000 Concentrator 2.2.x, ...)
-	NOTE: not-for-us (Cisco)
+	NOT-FOR-US: Cisco
 CVE-2002-1099 (Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, allows remote ...)
-	NOTE: not-for-us (Cisco)
+	NOT-FOR-US: Cisco
 CVE-2002-1098 (Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, adds an ...)
-	NOTE: not-for-us (Cisco)
+	NOT-FOR-US: Cisco
 CVE-2002-1097 (Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.2, allows ...)
-	NOTE: not-for-us (Cisco)
+	NOT-FOR-US: Cisco
 CVE-2002-1096 (Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.1, allows ...)
-	NOTE: not-for-us (Cisco)
+	NOT-FOR-US: Cisco
 CVE-2002-1095 (Cisco VPN 3000 Concentrator before 2.5.2(F), with encryption enabled, ...)
-	NOTE: not-for-us (Cisco)
+	NOT-FOR-US: Cisco
 CVE-2002-1093 (HTML interface for Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before ...)
-	NOTE: not-for-us (Cisco)
+	NOT-FOR-US: Cisco
 CVE-2002-1092 (Cisco VPN 3000 Concentrator 3.6(Rel) and earlier, and 2.x.x, when ...)
-	NOTE: not-for-us (Cisco)
+	NOT-FOR-US: Cisco
 CVE-2002-1091 (Netscape 6.2.3 and earlier, and Mozilla 1.0.1, allow remote attackers ...)
 	- mozilla 2:1.0.2
 CVE-2002-1088 (Buffer overflow in Novell GroupWise 6.0.1 Support Pack 1 allows remote ...)
-	NOTE: not-for-us (Novell GroupWise)
+	NOT-FOR-US: Novell GroupWise
 CVE-2002-1081 (The Administration console for Abyss Web Server 1.0.3 allows remote ...)
-	NOTE: not-for-us (Abyss Web Server)
+	NOT-FOR-US: Abyss Web Server
 CVE-2002-1079 (Directory traversal vulnerability in Abyss Web Server 1.0.3 allows ...)
-	NOTE: not-for-us (Abyss Web Server)
+	NOT-FOR-US: Abyss Web Server
 CVE-2002-1076 (Buffer overflow in the Web Messaging daemon for Ipswitch IMail before ...)
-	NOTE: not-for-us (Ipswitch IMail)
+	NOT-FOR-US: Ipswitch IMail
 CVE-2002-1060 (Cross-site scripting (XSS) vulnerability in CacheFlow CacheOS 4.1.06 ...)
-	NOTE: not-for-us (CacheFlow CacheOS)
+	NOT-FOR-US: CacheFlow CacheOS
 CVE-2002-1059 (Buffer overflow in Van Dyke SecureCRT SSH client before 3.4.6, and 4.x ...)
-	NOTE: not-for-us (Van Dyke SecureCRT SSH client)
+	NOT-FOR-US: Van Dyke SecureCRT SSH client
 CVE-2002-1057 (Buffer overflow in SmartMax MailMax POP3 daemon (popmax) 4.8 allows ...)
-	NOTE: not-for-us (SmartMax MailMax POP3 daemon)
+	NOT-FOR-US: SmartMax MailMax POP3 daemon
 CVE-2002-1056 (Microsoft Outlook 2000 and 2002, when configured to use Microsoft Word ...)
 	NOT-FOR-US: Microsoft
 CVE-2002-1054 (Directory traversal vulnerability in Pablo FTP server 1.0 build 9 and ...)
-	NOTE: not-for-us (Pablo FTP server)
+	NOT-FOR-US: Pablo FTP server
 CVE-2002-1053 (Cross-site scripting (XSS) vulnerability in W3C Jigsaw Proxy Server ...)
-	NOTE: not-for-us (W3C Jigsaw Proxy Server)
+	NOT-FOR-US: W3C Jigsaw Proxy Server
 CVE-2002-1051 (Format string vulnerability in TrACESroute 6.0 GOLD (aka NANOG ...)
 	{DSA-254}
 CVE-2002-1050 (Buffer overflow in HylaFAX faxgetty before 4.1.3 allows remote ...)
@@ -18986,43 +18986,43 @@
 	{DSA-148}
 	TODO: check
 CVE-2002-1046 (Dynamic VPN Configuration Protocol service (DVCP) in Watchguard ...)
-	NOTE: not-for-us (Watchguard Firebox firmware)
+	NOT-FOR-US: Watchguard Firebox firmware
 CVE-2002-1039 (Directory traversal vulnerability in Double Choco Latte (DCL) before ...)
 	- dcl 20020706
 CVE-2002-1035 (Omnicron OmniHTTPd 2.09 allows remote attackers to cause a denial of ...)
-	NOTE: not-for-us (Omnicron OmniHTTPd)
+	NOT-FOR-US: Omnicron OmniHTTPd
 CVE-2002-1031 (KeyFocus (KF) web server 1.0.2 allows remote attackers to list ...)
-	NOTE: not-for-us (KeyFocus (KF) web server)
+	NOT-FOR-US: KeyFocus (KF) web server
 CVE-2002-1030 (Race condition in Performance Pack in BEA WebLogic Server and Express ...)
-	NOTE: not-for-us (BEA WebLogic Server and Express)
+	NOT-FOR-US: BEA WebLogic Server and Express
 CVE-2002-1025 (JRun 3.0 through 4.0 allows remote attackers to read JSP source code ...)
-	NOTE: not-for-us (JRun)
+	NOT-FOR-US: JRun
 CVE-2002-1024 (Cisco IOS 12.0 through 12.2, when supporting SSH, allows remote ...)
-	NOTE: not-for-us (Cisco)
+	NOT-FOR-US: Cisco
 CVE-2002-1015 (RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold ...)
-	NOTE: not-for-us (Real)
+	NOT-FOR-US: Real
 CVE-2002-1014 (Buffer overflow in RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne ...)
-	NOTE: not-for-us (Real)
+	NOT-FOR-US: Real
 CVE-2002-1013 (Buffer overflow in traffic_manager for Inktomi Traffic Server 4.0.18 ...)
-	NOTE: not-for-us (Inktomi)
+	NOT-FOR-US: Inktomi
 CVE-2002-1006 (Cross-site scripting (XSS) vulnerability in BBC Education Text to ...)
-	NOTE: not-for-us (Betsie)
+	NOT-FOR-US: Betsie
 CVE-2002-1004 (Directory traversal vulnerability in webmail feature of ArGoSoft Mail ...)
-	NOTE: not-for-us (ArGoSoft Mail Server)
+	NOT-FOR-US: ArGoSoft Mail Server
 CVE-2002-1002 (Buffer overflow in Novell iManager (eMFrame 1.2.1) allows remote ...)
-	NOTE: not-for-us (Novell)
+	NOT-FOR-US: Novell
 CVE-2002-1000 (Buffer overflow in AnalogX SimpleServer:Shout 1.0 allows remote ...)
-	NOTE: not-for-us (AnalogX SimpleServer:Shout)
+	NOT-FOR-US: AnalogX SimpleServer:Shout
 CVE-2002-0995 (login.php for PHPAuction allows remote attackers to gain privileges ...)
-	NOTE: not-for-us (PHPAuction)
+	NOT-FOR-US: PHPAuction
 CVE-2002-0990 (The web proxy component in Symantec Enterprise Firewall (SEF) 6.5.2 ...)
-	NOTE: not-for-us (Symantec)
+	NOT-FOR-US: Symantec
 CVE-2002-0989 (The URL handler in the manual browser option for Gaim before 0.59.1 ...)
 	{DSA-158}
 CVE-2002-0988 (Buffer overflow in X server (Xsco) in OpenUNIX 8.0.0 and UnixWare ...)
-	NOTE: not-for-us (Xsco)
+	NOT-FOR-US: Xsco
 CVE-2002-0987 (X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1 does not drop ...)
-	NOTE: not-for-us (Xsco)
+	NOT-FOR-US: Xsco
 CVE-2002-0986 (The mail function in PHP 4.x to 4.2.2 does not filter ASCII control ...)
 	{DSA-168}
 CVE-2002-0985 (Argument injection vulnerability in the mail function for PHP 4.x to ...)
@@ -19030,37 +19030,37 @@
 CVE-2002-0984 (The IRC script included in Light 2.7.x before 2.7.30p5, and 2.8.x ...)
 	{DSA-156}
 CVE-2002-0981 (Buffer overflow in ndcfg command for UnixWare 7.1.1 and Open UNIX ...)
-	NOTE: not-for-us (ndcfg)
+	NOT-FOR-US: ndcfg
 CVE-2002-0974 (Help and Support Center for Windows XP allows remote attackers to ...)
-	NOTE: not-for-us (Help and Support Center for Windows XP)
+	NOT-FOR-US: Help and Support Center for Windows XP
 CVE-2002-0970 (The SSL capability for Konqueror in KDE 3.0.2 and earlier does not ...)
 	{DSA-155}
 CVE-2002-0969 (Buffer overflow in MySQL daemon (mysqld) before 3.23.50, and 4.0 beta ...)
 	NOTE: mysql problem only affects Windows
 CVE-2002-0968 (Buffer overflow in AnalogX SimpleServer:WWW 1.16 and earlier allows ...)
-	NOTE: not-for-us (AnalogX SimpleServer:WWW)
+	NOT-FOR-US: AnalogX SimpleServer:WWW
 CVE-2002-0967 (Buffer overflow in eDonkey 2000 35.16.60 and earlier allows remote ...)
-	NOTE: not-for-us (eDonkey)
+	NOT-FOR-US: eDonkey
 CVE-2002-0965 (Buffer overflow in TNS Listener for Oracle 9i Database Server on ...)
-	NOTE: not-for-us (Oracle)
+	NOT-FOR-US: Oracle
 CVE-2002-0964 (Half-Life Server 1.1.1.0 and earlier allows remote attackers to cause ...)
-	NOTE: not-for-us (Half Life)
+	NOT-FOR-US: Half Life
 CVE-2002-0958 (Cross-site scripting vulnerability in browse.php for PHP(Reactor) ...)
-	NOTE: not-for-us (PHP Reactor)
+	NOT-FOR-US: PHP Reactor
 CVE-2002-0953 (globals.php in PHP Address before 0.2f, with the PHP allow_url_fopen ...)
-	NOTE: not-for-us (PHP Address)
+	NOT-FOR-US: PHP Address
 CVE-2002-0952 (Cisco ONS15454 optical transport platform running ONS 3.1.0 to 3.2.0 ...)
-	NOTE: not-for-us (Cisco)
+	NOT-FOR-US: Cisco
 CVE-2002-0947 (Buffer overflow in rwcgi60 CGI program for Oracle Reports Server ...)
-	NOTE: not-for-us (Oracle)
+	NOT-FOR-US: Oracle
 CVE-2002-0946 (Directory traversal vulnerability in SeaNox Devwex before 1.2002.0601 ...)
-	NOTE: not-for-us (SeaNox Devwex)
+	NOT-FOR-US: SeaNox Devwex
 CVE-2002-0945 (Buffer overflow in SeaNox Devwex allows remote attackers to cause a ...)
-	NOTE: not-for-us (SeaNox Devwex)
+	NOT-FOR-US: SeaNox Devwex
 CVE-2002-0941 (The ConsoleCallBack class for nCipher running under JRE 1.4.0 and ...)
-	NOTE: not-for-us (Java on Windows)
+	NOT-FOR-US: Java on Windows
 CVE-2002-0938 (Cross-site scripting vulnerability in CiscoSecure ACS 3.0 allows ...)
-	NOTE: not-for-us (Cisco)
+	NOT-FOR-US: Cisco
 CVE-2002-0935 (Apache Tomcat 4.0.3, and possibly other versions before 4.1.3 beta, ...)
 	- tomcat4 4.1.9-1
 CVE-2002-0916 (Format string vulnerability in the allowuser code for the Stellar-X ...)
@@ -19068,27 +19068,27 @@
 CVE-2002-0914 (Double Precision Courier e-mail MTA allows remote attackers to cause a ...)
 	- courier-mta 0.46
 CVE-2002-0911 (Caldera Volution Manager 1.1 stores the Directory Administrator ...)
-	NOTE: not-for-us (Caldera Volution Manager)
+	NOT-FOR-US: Caldera Volution Manager
 CVE-2002-0906 (Buffer overflow in Sendmail before 8.12.5, when configured to use a ...)
 	- sendmail 8.12.5
 CVE-2002-0904 (SayText function in Kismet 2.2.1 and earlier allows remote attackers ...)
 	- kismet 2.2.2-1
 CVE-2002-0900 (Buffer overflow in pks PGP public key web server before 0.9.5 allows ...)
-	NOTE: not-for-us (pks)
+	NOT-FOR-US: pks
 CVE-2002-0898 (Opera 6.0.1 and 6.0.2 allows a remote web site to upload arbitrary ...)
-	NOTE: not-for-us (Opera)
+	NOT-FOR-US: Opera
 CVE-2002-0897 (LocalWEB2000 2.1.0 web server allows remote attackers to bypass access ...)
-	NOTE: not-for-us (LocalWEB2000)
+	NOT-FOR-US: LocalWEB2000
 CVE-2002-0895 (Buffer overflow in MatuFtpServer 1.1.3.0 (1.1.3) allows remote ...)
-	NOTE: not-for-us (MatuFtpServer)
+	NOT-FOR-US: MatuFtpServer
 CVE-2002-0892 (The default configuration of NewAtlanta ServletExec ISAPI 4.1 allows ...)
-	NOTE: not-for-us (NewAtlanta ServletExec ISAPI)
+	NOT-FOR-US: NewAtlanta ServletExec ISAPI
 CVE-2002-0891 (The web interface (WebUI) of NetScreen ScreenOS before 2.6.1r8, and ...)
-	NOTE: not-for-us (NetScreen ScreenOS)
+	NOT-FOR-US: NetScreen ScreenOS
 CVE-2002-0889 (Buffer overflow in Qpopper (popper) 4.0.4 and earlier allows local ...)
 	- qpopper 4.0.5-1
 CVE-2002-0887 (scoadmin for Caldera/SCO OpenServer 5.0.5 and 5.0.6 allows local users ...)
-	NOTE: not-for-us (scoadmin)
+	NOT-FOR-US: scoadmin
 CVE-2002-0875 (Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows ...)
 	{DSA-154}
 CVE-2002-0873 (Vulnerability in l2tpd 0.67 allows remote attackers to overwrite the ...)
@@ -19110,22 +19110,22 @@
 CVE-2002-0859 (Buffer overflow in the OpenDataSource function of the Jet engine on ...)
 	NOT-FOR-US: Microsoft
 CVE-2002-0856 (SQL*NET listener for Oracle Net Oracle9i 9.0.x and 9.2 allows remote ...)
-	NOTE: not-for-us (Oracle)
+	NOT-FOR-US: Oracle
 CVE-2002-0853 (Cisco Virtual Private Network (VPN) Client 3.5.4 and earlier allows ...)
-	NOTE: not-for-us (Cisco)
+	NOT-FOR-US: Cisco
 CVE-2002-0851 (Format string vulnerability in ISDN Point to Point Protocol (PPP) ...)
 	- isdnutils 1:3.2
 CVE-2002-0850 (Buffer overflow in PGP Corporate Desktop 7.1.1 allows remote attackers ...)
-	NOTE: not-for-us (PGP corporate desktop)
+	NOT-FOR-US: PGP corporate desktop
 CVE-2002-0848 (Cisco VPN 5000 series concentrator hardware 6.0.21.0002 and earlier, ...)
-	NOTE: not-for-us (Cisco)
+	NOT-FOR-US: Cisco
 CVE-2002-0847 (tinyproxy HTTP proxy 1.5.0, 1.4.3, and earlier allows remote attackers ...)
 	{DSA-145}
 	TODO: check
 CVE-2002-0846 (The decoder for Macromedia Shockwave Flash allows remote attackers to ...)
 	- flashplugin-nonfree 6.0.47
 CVE-2002-0845 (Buffer overflow in Sun ONE / iPlanet Web Server 4.1 and 6.0 allows ...)
-	NOTE: not-for-us (Sun ONE)
+	NOT-FOR-US: Sun ONE
 CVE-2002-0844 (Off-by-one overflow in the CVS PreservePermissions of rcs.c for CVSD ...)
 	- cvs 1:1.11.2
 CVE-2002-0842 (Format string vulnerability in certain third party modifications to ...)
@@ -19138,20 +19138,20 @@
 CVE-2002-0836 (dvips converter for Postscript files in the tetex package calls the ...)
 	{DSA-207}
 CVE-2002-0835 (Preboot eXecution Environment (PXE) server allows remote attackers to ...)
-	NOTE: not-for-us (RedHat/Intel PXE daemon)
+	NOT-FOR-US: RedHat/Intel PXE daemon
 	NOTE: this is not the one in Debian
 CVE-2002-0831 (The kqueue mechanism in FreeBSD 4.3 through 4.6 STABLE allows local ...)
-	NOTE: not-for-us (FreeBSD)
+	NOT-FOR-US: FreeBSD
 CVE-2002-0830 (Network File System (NFS) in FreeBSD 4.6.1 RELEASE-p7 and earlier, ...)
-	NOTE: not-for-us (BSD/NFS)
+	NOT-FOR-US: BSD/NFS
 CVE-2002-0829 (Integer overflow in the Berkeley Fast File System (FFS) in FreeBSD ...)
-	NOTE: not-for-us (FreeBSD)
+	NOT-FOR-US: FreeBSD
 CVE-2002-0826 (Buffer overflow in WS_FTP FTP Server 3.1.1 allows remote authenticated ...)
-	NOTE: not-for-us (WS FTP server)
+	NOT-FOR-US: WS FTP server
 CVE-2002-0824 (BSD pppd allows local users to change the permissions of arbitrary ...)
-	NOTE: not-for-us (BSD/pppd)
+	NOT-FOR-US: BSD/pppd
 CVE-2002-0823 (Buffer overflow in Winhlp32.exe allows remote attackers to execute ...)
-	NOTE: not-for-us (Windows)
+	NOT-FOR-US: Windows
 CVE-2002-0818 (wwwoffled in World Wide Web Offline Explorer (WWWOFFLE) allows remote ...)
 	{DSA-144}
 	TODO: check
@@ -19159,11 +19159,11 @@
 	{DSA-139}
 	TODO: check
 CVE-2002-0816 (Buffer overflow in su in Tru64 Unix 5.x allows local users to gain ...)
-	NOTE: not-for-us (HP Tru64)
+	NOT-FOR-US: HP Tru64
 CVE-2002-0814 (Buffer overflow in VMware Authorization Service for VMware GSX Server ...)
-	NOTE: not-for-us (VMware)
+	NOT-FOR-US: VMware
 CVE-2002-0813 (Heap-based buffer overflow in the TFTP server capability in Cisco IOS ...)
-	NOTE: not-for-us (Cisco)
+	NOT-FOR-US: Cisco
 CVE-2002-0810 (Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, directs error ...)
 	- bugzilla 2.16.0
 CVE-2002-0809 (Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, does not ...)
@@ -19179,57 +19179,57 @@
 CVE-2002-0802 (The multibyte support in PostgreSQL 6.5.x with SQL_ASCII encoding ...)
 	- postgresql 7.2
 CVE-2002-0801 (Buffer overflow in the ISAPI DLL filter for Macromedia JRun 3.1 allows ...)
-	NOTE: not-for-us (Macromedia / Windows)
+	NOT-FOR-US: Macromedia / Windows
 CVE-2002-0795 (The rc system startup script for FreeBSD 4 through 4.5 allows local ...)
-	NOTE: not-for-us (FreeBSD)
+	NOT-FOR-US: FreeBSD
 CVE-2002-0794 (The accept_filter mechanism in FreeBSD 4 through 4.5 does not properly ...)
-	NOTE: not-for-us (FreeBSD)
+	NOT-FOR-US: FreeBSD
 CVE-2002-0790 (clchkspuser and clpasswdremote in AIX expose an encrypted password in ...)
-	NOTE: not-for-us (AIX)
+	NOT-FOR-US: AIX
 CVE-2002-0789 (Buffer overflow in search.cgi in mnoGoSearch 3.1.19 and earlier allows ...)
 	- mnogosearch 3.1.19-3
 CVE-2002-0788 (An interaction between PGP 7.0.3 with the &quot;wipe deleted files&quot; option, ...)
-	NOTE: not-for-us (windows)
+	NOT-FOR-US: windows
 CVE-2002-0785 (AOL Instant Messenger (AIM) allows remote attackers to cause a denial ...)
-	NOTE: not-for-us (AOL AIM)
+	NOT-FOR-US: AOL AIM
 CVE-2002-0778 (The default configuration of the proxy for Cisco Cache Engine and ...)
-	NOTE: not-for-us (CISCO)
+	NOT-FOR-US: CISCO
 CVE-2002-0777 (Buffer overflow in the LDAP component of Ipswitch IMail 7.1 and ...)
-	NOTE: not-for-us (Ipswitch not in Debian)
+	NOT-FOR-US: Ipswitch not in Debian
 CVE-2002-0776 (getuserdesc.asp in Hosting Controller 2002 allows remote attackers to ...)
-	NOTE: not-for-us (Hosting Controller 2002)
+	NOT-FOR-US: Hosting Controller 2002
 CVE-2002-0768 (Buffer overflow in lukemftp FTP client in SuSE 6.4 through 8.0, and ...)
 	- lukemftp 1.5-7
 CVE-2002-0766 (OpenBSD 2.9 through 3.1 allows local users to cause a denial of ...)
-	NOTE: not-for-us (OpenBSD)
+	NOT-FOR-US: OpenBSD
 CVE-2002-0765 (sshd in OpenSSH 3.2.2, when using YP with netgroups and under certain ...)
 	- openssh 1:3.3p1-0.0woody1
 CVE-2002-0762 (shadow package in SuSE 8.0 allows local users to destroy the ...)
-	NOTE: not-for-us (SUSE specific)
+	NOT-FOR-US: SUSE specific
 CVE-2002-0761 (bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and ...)
-	NOTE: not-for-us (FreeBSD and OpenLinux)
+	NOT-FOR-US: FreeBSD and OpenLinux
 CVE-2002-0760 (Race condition in bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, ...)
-	NOTE: not-for-us (FreeBSD and OpenLinux)
+	NOT-FOR-US: FreeBSD and OpenLinux
 CVE-2002-0759 (bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and ...)
-	NOTE: not-for-us (FreeBSD and OpenLinux)
+	NOT-FOR-US: FreeBSD and OpenLinux
 CVE-2002-0758 (ifup-dhcp script in the sysconfig package for SuSE 8.0 allows remote ...)
-	NOTE: not-for-us (SUSE specific)
+	NOT-FOR-US: SUSE specific
 CVE-2002-0755 (Kerberos 5 su (k5su) in FreeBSD 4.5 and earlier does not verify that a ...)
-	NOTE: not-for-us (FreeBSD)
+	NOT-FOR-US: FreeBSD
 CVE-2002-0754 (Kerberos 5 su (k5su) in FreeBSD 4.4 and earlier relies on the getlogin ...)
-	NOTE: not-for-us (FreeBSD)
+	NOT-FOR-US: FreeBSD
 CVE-2002-0748 (LabVIEW Web Server 5.1.1 through 6.1 allows remote attackers to cause ...)
-	NOTE: not-for-us (Labview)
+	NOT-FOR-US: Labview
 CVE-2002-0741 (psyBNC 2.3 allows remote attackers to cause a denial of service (CPU ...)
-	NOTE: not-for-us (psyBNC)
+	NOT-FOR-US: psyBNC
 CVE-2002-0738 (MHonArc 2.5.2 and earlier does not properly filter Javascript from ...)
 	{DSA-163}
 CVE-2002-0737 (Sambar web server before 5.2 beta 1 allows remote attackers to obtain ...)
-	NOTE: not-for-us (Sambar web server)
+	NOT-FOR-US: Sambar web server
 CVE-2002-0736 (Microsoft BackOffice 4.0 and 4.5, when configured to be accessible by ...)
 	NOT-FOR-US: Microsoft
 CVE-2002-0734 (b2edit.showposts.php in B2 2.0.6pre2 and earlier does not properly ...)
-	NOTE: not-for-us (B2)
+	NOT-FOR-US: B2
 CVE-2002-0733 (Cross-site scripting vulnerability in thttpd 2.20 and earlier allows ...)
 	- thttpd 2.21
 CVE-2002-0729 (Microsoft SQL Server 2000 allows remote attackers to cause a denial of ...)
@@ -19247,11 +19247,11 @@
 CVE-2002-0718 (Web authoring command in Microsoft Content Management Server (MCMS) ...)
 	NOT-FOR-US: Microsoft
 CVE-2002-0716 (Format string vulnerability in crontab for SCO OpenServer 5.0.5 and ...)
-	NOTE: not-for-us (SCO OpenServer)
+	NOT-FOR-US: SCO OpenServer
 CVE-2002-0714 (FTP proxy in Squid before 2.4.STABLE6 does not compare the IP ...)
 	- squid 2.4.6
 CVE-2002-0710 (Directory traversal vulnerability in sendform.cgi 1.44 and earlier ...)
-	NOTE: not-for-us (sendform.cgi)
+	NOT-FOR-US: sendform.cgi
 CVE-2002-0704 (The Network Address Translation (NAT) capability for Netfilter ...)
 	NOTE: kernel netfilter bug, not in user space
 	NOTE: this is fixed in kernel 2.4.20
@@ -19261,7 +19261,7 @@
 	- perl 5.8.0-7
 	NOTE: woody seems to be vulnerable, bug #282527
 CVE-2002-0701 (ktrace in BSD-based operating systems allows the owner of a process ...)
-	NOTE: not-for-us (BSD)
+	NOT-FOR-US: BSD
 CVE-2002-0700 (Buffer overflow in a system function that performs user authentication ...)
 	NOT-FOR-US: Microsoft
 CVE-2002-0698 (Buffer overflow in Internet Mail Connector (IMC) for Microsoft ...)
@@ -19293,15 +19293,15 @@
 CVE-2002-0676 (SoftwareUpdate for MacOS 10.1.x does not use authentication when ...)
 	NOT-FOR-US: MacOS
 CVE-2002-0674 (Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 ...)
-	NOTE: not-for-us (Pingtel xpressa SIP-based voice-over-IP phone)
+	NOT-FOR-US: Pingtel xpressa SIP-based voice-over-IP phone
 CVE-2002-0673 (The enrollment process for Pingtel xpressa SIP-based voice-over-IP ...)
-	NOTE: not-for-us (Pingtel xpressa SIP-based voice-over-IP phone)
+	NOT-FOR-US: Pingtel xpressa SIP-based voice-over-IP phone
 CVE-2002-0672 (Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 ...)
-	NOTE: not-for-us (Pingtel xpressa SIP-based voice-over-IP phone)
+	NOT-FOR-US: Pingtel xpressa SIP-based voice-over-IP phone
 CVE-2002-0671 (Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 ...)
-	NOTE: not-for-us (Pingtel xpressa SIP-based voice-over-IP phone)
+	NOT-FOR-US: Pingtel xpressa SIP-based voice-over-IP phone
 CVE-2002-0668 (The web interface for Pingtel xpressa SIP-based voice-over-IP phone ...)
-	NOTE: not-for-us (Pingtel xpressa SIP-based voice-over-IP phone)
+	NOT-FOR-US: Pingtel xpressa SIP-based voice-over-IP phone
 CVE-2002-0665 (Macromedia JRun Administration Server allows remote attackers to ...)
 	NOT-FOR-US: Microsoft
 CVE-2002-0663 (Buffer overflow in HTTP Proxy for Symantec Norton Personal Internet ...)

More information about the Secure-testing-commits mailing list