[Secure-testing-commits] r3687 - data/CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2006-03-24 14:37:52 +0000 (Fri, 24 Mar 2006)
New Revision: 3687

Modified:
   data/CVE/list
Log:
NFUs
claim


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-03-24 14:26:21 UTC (rev 3686)
+++ data/CVE/list	2006-03-24 14:37:52 UTC (rev 3687)
@@ -253,26 +253,24 @@
 	NOT-FOR-US: Light Weight Calendar
 CVE-2006-1251 (greylistclean.cron in sa-exim 4.2 allows remote attackers to delete ...)
 	- sa-exim 4.2.1-1 (bug #345071; bug #356301)
-begin claimed by jmm
 CVE-2006-1250 (Unspecified vulnerability in the Webmail module in Winmail before 4.3 ...)
-	TODO: check
+	NOT-FOR-US: Winmail
 CVE-2006-1249 (** UNVERIFIABLE, PRERELEASE ** ...)
-	TODO: check
+	NOT-FOR-US: Apple Quicktime
 CVE-2006-1248 (Unspecified vulnerability in usermod in HP-UX B.11.00, B.11.11, and ...)
-	TODO: check
+	NOT-FOR-US: HP-UX 
 CVE-2006-1247
 	RESERVED
 CVE-2006-1246 (Unspecified vulnerability in BOS.RTE.LVM in IBM AIX 5.3 has unknown ...)
-	TODO: check
+	NOT-FOR-US: AIX 
 CVE-2006-1245 (Buffer overflow in mshtml.dll in Microsoft Internet Explorer ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2005-4743 (Multiple SQL injection vulnerabilities in index.php in NeLogic Nephp ...)
-	TODO: check
+	NOT-FOR-US: NeLogic Nephp Publisher
 CVE-2005-4742 (Unspecified vulnerability in Echelog 0.6.2 allows attackers to ...)
-	TODO: check
+	NOT-FOR-US: Echelog
 CVE-2005-4741 (NetBSD 1.6, NetBSD 2.0 through 2.1, and NetBSD-current before 20051031 ...)
-	TODO: check
-end claimed by jmm
+	NOT-FOR-US: NetBSD
 CVE-2005-4740 (IBM DB2 Universal Database (UDB) 810 before version 8 FixPak 10 allows ...)
 	NOT-FOR-US: IBM DB2
 CVE-2005-4739 (IBM DB2 Universal Database (UDB) 820 before version 8 FixPak 10 ...)
@@ -286,15 +284,15 @@
 CVE-2005-4735 (IBM DB2 Universal Database (UDB) 810 before 8.1 FP10 allows remote ...)
 	NOT-FOR-US: IBM DB2
 CVE-2005-4734 (Stack-based buffer overflow in IISWebAgentIF.dll in RSA Authentication ...)
-	TODO: check
+	NOT-FOR-US: RSA Authentication Agent for Web
 CVE-2005-4733 (NetBSD 2.0 before 20050316 and NetBSD-current before 20050112 allow ...)
-	TODO: check
+	NOT-FOR-US: NetBSD 
 CVE-2005-4732 (Multiple cross-site scripting (XSS) vulnerabilities in index.php in ...)
-	TODO: check
+	NOT-FOR-US: TuxBank
 CVE-2003-1297 (Easy File Sharing (EFS) Web Server 1.2 stores the (1) option.ini (aka ...)
-	TODO: check
+	NOT-FOR-US: Easy File Sharing (EFS) Web Server
 CVE-2003-1296 (Easy File Sharing (EFS) Web Server 1.2 allows remote authenticated ...)
-	TODO: check
+	NOT-FOR-US: Easy File Sharing (EFS) Web Server
 CVE-2005-XXXX [xsupplicant information leak]
 	- xsupplicant 1.0.1-5 (bug #317703; low)
 CVE-2006-1244 (Unspecified vulnerability in certain versions of xpdf after 3.00, as ...)
@@ -968,6 +966,7 @@
 	NOTE: Only an example, not in the binary package
 CVE-2006-1321 (Cross-site scripting (XSS) vulnerability in webcheck before 1.9.6 ...)
 	- webcheck 1.9.6
+begin claimed by jmm
 CVE-2006-0937 (U.N.U. Mailgust 1.9 allows remote attackers to obtain sensitive ...)
 	TODO: check
 CVE-2006-0936 (Free Host Shop Website Generator 3.3 allows remote authenticated users ...)
@@ -990,6 +989,7 @@
 	TODO: check
 CVE-2006-0927 (Multiple cross-site scripting (XSS) vulnerabilities in the JGS-XA ...)
 	TODO: check
+end claimed by jmm
 CVE-2006-0926 (Multiple directory traversal vulnerabilities in Allume StuffIt ...)
 	TODO: check
 CVE-2006-0925 (Format string vulnerability in the IMAP4rev1 server in Alt-N MDaemon ...)