[Secure-testing-commits] r5216 - in data: CVE DSA

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2007-01-07 13:55:26 +0100 (Sun, 07 Jan 2007)
New Revision: 5216

Modified:
   data/CVE/list
   data/DSA/list
Log:
new proftpd DSA
NFUs


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-01-07 12:41:09 UTC (rev 5215)
+++ data/CVE/list	2007-01-07 12:55:26 UTC (rev 5216)
@@ -11,11 +11,11 @@
 CVE-2007-0047 (CRLF injection vulnerability in Adobe Acrobat Reader Plugin before ...)
 	NOT-FOR-US: Adobe Acrobat Reader with Internet Explorer
 CVE-2007-0046 (Double free vulnerability in the Adobe Acrobat Reader Plugin before ...)
-	TODO: check
+	NOT-FOR-US: Adobe Acrobat Reader Plugin
 CVE-2007-0045 (Multiple cross-site scripting (XSS) vulnerabilities in Adobe Acrobat ...)
-	TODO: check
+	NOT-FOR-US: Adobe Acrobat Reader Plugin
 CVE-2007-0044 (Adobe Acrobat Reader Plugin before 8.0.0 for the Firefox, Internet ...)
-	TODO: check
+	NOT-FOR-US: Adobe Acrobat Reader Plugin
 CVE-2007-0043
 	RESERVED
 CVE-2007-0042
@@ -95,7 +95,7 @@
 CVE-2006-6848 (SQL injection vulnerability in admin.asp in ASPTicker 1.0 allows ...)
 	NOT-FOR-US: ASPTicker
 CVE-2006-6847 (An ActiveX control in ierpplug.dll for RealNetworks RealPlayer 10.5 ...)
-	TODO: check
+	NOT-FOR-US: RealPlayer for Windows
 CVE-2006-6846 (Multiple SQL injection vulnerabilities in WYWO - InOut Board 1.0 allow ...)
 	NOT-FOR-US: WYWO - InOut Board 
 CVE-2006-6845 (Cross-site scripting (XSS) vulnerability in index.php in CMS Made ...)
@@ -121,7 +121,7 @@
 CVE-2007-XXXX [libsoup parse_headers_DoS]
 	- libsoup 2.2.98-2 (bug #405197)
 CVE-2007-0015 (Buffer overflow in Apple QuickTime 7.1.3 allows remote attackers to ...)
-	TODO: check
+	NOT-FOR-US: Apple Quicktime
 CVE-2007-0014
 	RESERVED
 CVE-2007-0013

Modified: data/DSA/list
===================================================================
--- data/DSA/list	2007-01-07 12:41:09 UTC (rev 5215)
+++ data/DSA/list	2007-01-07 12:55:26 UTC (rev 5216)
@@ -1,3 +1,6 @@
+[07 Dec 2007] DSA-1245-1 proftpd
+	{CVE-2005-4816}
+	[sarge] - proftpd 1.2.10-15sarge4
 [28 Dec 2006] DSA-1244-1 xine-lib
 	{CVE-2006-6172}
         [sarge] - xine-lib 1.0.1-1sarge5