[Secure-testing-commits] r4744 - data/CVE

[Stefan Fritsch]

Author: stef-guest
Date: 2006-09-18 20:51:00 +0000 (Mon, 18 Sep 2006)
New Revision: 4744

Modified:
   data/CVE/list
Log:
- CVE-2006-471[12]: new firefox-sage issues (medium)
- some NFUs


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-09-18 18:14:07 UTC (rev 4743)
+++ data/CVE/list	2006-09-18 20:51:00 UTC (rev 4744)
@@ -121,11 +121,11 @@
 	- magpierss <unfixed> (unimportant)
 	NOTE: path disclosure only
 CVE-2006-4734 (Multiple SQL injection vulnerabilities in tiki-g-admin_processes.php ...)
-	- tikiwiki (medium; bug filed)
+	- tikiwiki (medium; bug #388122)
 CVE-2006-4733 (PHP remote file inclusion vulnerability in sipssys/code/box.inc.php in ...)
-	TODO: check
+	NOT-FOR-US: simple, integrated publishing system (SIPS)
 CVE-2006-4732 (Unspecified vulnerability in Microsoft Visual Basic (VB) 6 has an ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2002-2218 (CRLF injection vulnerability in the setUserValue function in ...)
 	TODO: check
 CVE-2000-1241 (Unspecified vulnerability in Haakon Nilsen simple, integrated ...)
@@ -141,37 +141,37 @@
 CVE-2006-4727
 	RESERVED
 CVE-2006-4726 (Cross-site scripting (XSS) vulnerability in Adobe ColdFusion MX 6.1 ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2006-4725 (Adobe ColdFusion MX 7 and 7.01 allows local users to bypass security ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2006-4724 (Unspecified vulnerability in the ColdFusion Flash Remoting Gateway in Adobe ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2006-4723 (PHP remote file inclusion vulnerability in ...)
-	TODO: check
+	NOT-FOR-US: RaidenHTTPD
 CVE-2006-4722 (PHP remote file inclusion vulnerability in Open Bulletin Board ...)
-	TODO: check
+	NOT-FOR-US: Open Bulletin Board (OpenBB)
 CVE-2006-4721 (Directory traversal vulnerability in admin.php in CCleague Pro Sports ...)
-	TODO: check
+	NOT-FOR-US: CCleague Pro Sports CMS
 CVE-2006-4720 (PHP remote file inclusion vulnerability in random2.php in mcGalleryPRO ...)
-	TODO: check
+	NOT-FOR-US: mcGalleryPRO
 CVE-2006-4719 (Multiple PHP remote file inclusion vulnerabilities in MyABraCaDaWeb ...)
-	TODO: check
+	NOT-FOR-US: MyABraCaDaWeb
 CVE-2006-4718 (Multiple cross-site scripting (XSS) vulnerabilities in livre_or.php in ...)
-	TODO: check
+	NOT-FOR-US: KorviBlog
 CVE-2006-4717 (The login redirection mechanism in the Drupal 4.7 Pubcookie module ...)
-	TODO: check
+	NOT-FOR-US: Pubcookie module for Drupal
 CVE-2006-4716 (PHP remote file inclusion vulnerability in demarrage.php in Fire Soft ...)
-	TODO: check
+	NOT-FOR-US: Fire Soft Board (FSB)
 CVE-2006-4715 (SQL injection vulnerability in pdf_version.php in SpoonLabs Vivvo ...)
-	TODO: check
+	NOT-FOR-US: SpoonLabs Vivvo Article Management CMS
 CVE-2006-4714 (PHP remote file inclusion vulnerability in index.php in SpoonLabs ...)
-	TODO: check
+	NOT-FOR-US: SpoonLabs Vivvo Article Management CMS
 CVE-2006-4713 (PHP remote file inclusion vulnerability in config.php in PSYWERKS PUMA ...)
-	TODO: check
+	NOT-FOR-US: PSYWERKS PUMA
 CVE-2006-4712 (Multiple cross-site scripting (XSS) vulnerabilities in Sage 1.3.6 ...)
-	TODO: check
+	- firefox-sage <unfixed> (bug filed; medium)
 CVE-2006-4711 (Multiple cross-site scripting (XSS) vulnerabilities in Sage allow ...)
-	TODO: check
+	- firefox-sage <unfixed> (bug filed; medium)
 CVE-2006-4710 (Multiple cross-site scripting (XSS) vulnerabilities in NewsGator ...)
 	TODO: check
 CVE-2006-4709 (SQL injection vulnerability in topic.php in Vikingboard 0.1b allows ...)