[Secure-testing-commits] r2110 - data/CAN

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2005-09-22 21:33:28 +0000 (Thu, 22 Sep 2005)
New Revision: 2110

Modified:
   data/CAN/list
Log:
processed block, only nfus, claim remaining block


Modified: data/CAN/list
===================================================================
--- data/CAN/list	2005-09-22 21:27:28 UTC (rev 2109)
+++ data/CAN/list	2005-09-22 21:33:28 UTC (rev 2110)
@@ -32,38 +32,37 @@
 	NOTE: not-for-us (Ahnlab Anti virus)
 CAN-2005-3028
 	NOTE: rejected
-begin claimed by jmm
 CAN-2005-3027 (Sybari Antigen 8.0 SR2 does not properly filter SMTP messages, which ...)
-	TODO: check
+	NOTE: not-for-us (Sybari Antigen anti spam solution)
 CAN-2005-3026 (Directory traversal vulnerability in index.php in Alstrasoft Epay Pro ...)
-	TODO: check
+	NOTE: not-for-us (Epay Pro)
 CAN-2005-3025 (Multiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.0.7 ...)
-	TODO: check
+	NOTE: not-for-us (vBulletin)
 CAN-2005-3024 (Multiple SQL injection vulnerabilities in vBulletin 3.0.7 and earlier ...)
-	TODO: check
+	NOTE: not-for-us (vBulletin)
 CAN-2005-3023 (Multiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.0.9 ...)
-	TODO: check
+	NOTE: not-for-us (vBulletin)
 CAN-2005-3022 (Multiple SQL injection vulnerabilities in vBulletin 3.0.9 and earlier ...)
-	TODO: check
+	NOTE: not-for-us (vBulletin)
 CAN-2005-3021 (image.php in vBulletin 3.0.9 and earlier allows remote attackers with ...)
-	TODO: check
+	NOTE: not-for-us (vBulletin)
 CAN-2005-3020 (Multiple cross-site scripting (XSS) vulnerabilities in vBulletin ...)
-	TODO: check
+	NOTE: not-for-us (vBulletin)
 CAN-2005-3019 (Multiple SQL injection vulnerabilities in vBulletin before 3.0.9 allow ...)
-	TODO: check
+	NOTE: not-for-us (vBulletin)
 CAN-2005-3018 (Apple Safari allows remote attackers to cause a denial of service ...)
-	TODO: check
+	NOTE: not-for-us (Safari)
 CAN-2005-3017 (PHP file inclusion vulnerability in index.php in Content2Web 1.0.1 ...)
-	TODO: check
+	NOTE: not-for-us (Content2Web)
 CAN-2005-3016 (Multiple unspecified vulnerabilities in the WYSIWYG editor in PHP-Nuke ...)
-	TODO: check
+	NOTE: not-for-us (PHP-Nuke)
 CAN-2005-3015 (Cross-site scripting (XSS) vulnerability in IBM Lotus Domino 6.5.2 ...)
-	TODO: check
+	NOTE: not-for-us (Lotus Domino)
 CAN-2005-3014 (Cross-site scripting (XSS) vulnerability in Ensim webplliance allows ...)
-	TODO: check
+	NOTE: not-for-us (Ensim webppliance)
 CAN-2005-3013 (Buffer overflow in YaST for SuSE Linux 9.3 allows local users to ...)
-	TODO: check
-end claimed by jmm
+	NOTE: not-for-us (YaST)
+begin claimed by jmm
 CAN-2005-3012 (The MasterDataCD::createImage function in masterdatacd.cpp for ...)
 	TODO: check
 CAN-2005-3011 (texindex in texinfo 4.7 and earlier allows local users to overwrite ...)
@@ -109,6 +108,7 @@
 CAN-2005-2992 [Another arc tempfile issue]
 	NOTE: reserved
 	- arc 5.21m-1 (low)
+end claimed by jmm
 CAN-2005-XXXX [Firefox passes URLs with backticks from external programs to the shell]
 	- mozilla-firefox not-affected (Debian ships a non-vulnerable wrapper script)
 	- mozilla-thunderbird (unfixed; bug #329667; high)