[Secure-testing-commits] r6325 - data/CVE

[thijs at alioth.debian.org]

Author: thijs
Date: 2007-08-15 20:13:53 +0000 (Wed, 15 Aug 2007)
New Revision: 6325

Modified:
   data/CVE/list
Log:
1999 Sun SendmailV5 vulnerability not relevant
4 NFU's


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-08-15 20:03:55 UTC (rev 6324)
+++ data/CVE/list	2007-08-15 20:13:53 UTC (rev 6325)
@@ -1453,7 +1453,7 @@
 CVE-2007-3677 (Multiple SQL injection vulnerabilities in Maxsi eVisit Analyst allow ...)
 	NOT-FOR-US: Maxsi eVisit Analyst
 CVE-1999-1592 (Multiple unspecified vulnerabilities in sendmail 5, as installed on ...)
-	TODO: check
+	- sendmail <not-affected> (Concerns only ancient sendmail V5)
 CVE-2007-3676
 	RESERVED
 CVE-2007-3675
@@ -1826,7 +1826,7 @@
 CVE-2004-2681 (PeerSec MatrixSSL before 1.1 caches session keys for an indefinitely ...)
 	- matrixssl 1.1-1
 CVE-1999-1591 (Microsoft Internet Information Services (IIS) server 4.0 SP4, without ...)
-	TODO: check
+	NOT-FOR-US: Microsoft IIS
 CVE-2007-XXXX [moodle several XSS]
 	- moodle 1.8.2-1 (bug #432264)
 CVE-2007-3514 (Cross-domain vulnerability in Apple Safari for Windows 3.0.2 allows ...)
@@ -3120,7 +3120,7 @@
 CVE-2005-4840 (The Outlook Express Address Book control, when using Internet Explorer ...)
 	NOT-FOR-US: Microsoft
 CVE-2000-1243 (Privacy leak in Dansie Shopping Cart 3.04, and probably earlier ...)
-	TODO: check
+	NOT-FOR-US: Dansie Shopping Cart
 CVE-2007-XXXX [webpy HTTP response splitting vulnerability]
 	- webpy 0.210-1 (bug #427715; unimportant)
 	NOTE: This is not a vulnerability, but an additional precaution function for
@@ -4860,9 +4860,9 @@
 CVE-2007-2225 (A component in Microsoft Outlook Express 6 and Windows Mail in Windows ...)
 	NOT-FOR-US: Microsoft
 CVE-2007-2224 (Unspecified vulnerability in Object linking and embedding (OLE) ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2007-2223 (Unspecified vulnerability in Microsoft XML Core Services (MSXML) 3.0 ...)
-	TODO: check
+	NOT-FOR-US: Microsoft XML
 CVE-2007-2222 (Multiple buffer overflows in the (1) ActiveListen (Xlisten.dll) and ...)
 	NOT-FOR-US: Microsoft
 CVE-2007-2221 (Unspecified vulnerability in the mdsauth.dll COM object in Microsoft ...)
@@ -4876,7 +4876,7 @@
 CVE-2007-2217
 	RESERVED
 CVE-2007-2216 (Unspecified vulnerability in the tblinf32.dll (aka vstlbinf.dll) ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Internet Explorer
 CVE-2007-2215
 	RESERVED
 CVE-2007-2214 (Unrestricted file upload vulnerability in includes/upload_file.php in ...)