[Secure-testing-commits] r6100 - data/CVE

[alec-guest at alioth.debian.org]

Author: alec-guest
Date: 2007-07-06 15:43:30 +0000 (Fri, 06 Jul 2007)
New Revision: 6100

Modified:
   data/CVE/list
Log:
NFUs

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-07-06 15:38:37 UTC (rev 6099)
+++ data/CVE/list	2007-07-06 15:43:30 UTC (rev 6100)
@@ -37,7 +37,7 @@
 CVE-2007-3498 (Cross-site scripting (XSS) vulnerability in smoketests/configForm.php ...)
 	NOT-FOR-US: HTML Purifier
 CVE-2007-3497 (Microsoft Internet Explorer 7 allows remote attackers to determine the ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Internet Explorer
 CVE-2007-3496 (Cross-site scripting (XSS) vulnerability in SAP Web Dynpro Java ...)
 	NOT-FOR-US: SAP Web Dynpro Java
 CVE-2007-3495 (Multiple cross-site scripting (XSS) vulnerabilities in the SAP ...)
@@ -45,19 +45,19 @@
 CVE-2007-3494 (Papoo CMS 3.6, and possibly earlier, does not verify user privileges ...)
 	NOT-FOR-US: Papoo CMS
 CVE-2007-3493 (A certain ActiveX control in NCTWavChunksEditor2.dll 2.6.1.148 in ...)
-	TODO: check
+	NOT-FOR-US: NCTAudioStudio
 CVE-2007-3492 (Conti FtpServer 1.0 allows remote authenticated users to cause a ...)
 	NOT-FOR-US: Conti FtpServer
 CVE-2007-3491 (Buffer overflow in _mprosrv in Progress Software OpenEdge before ...)
 	NOT-FOR-US: Progress Software OpenEdge
 CVE-2007-3490 (Unspecified vulnerability in Microsoft Excel 2003 SP2 allows remote ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Excel 2003 SP2
 CVE-2007-3489 (Cross-site request forgery (CSRF) vulnerability in pop/WizU.html in ...)
 	NOT-FOR-US: Check Point VPN-1 Edge X
 CVE-2007-3488 (Heap-based buffer overflow in the viewer ActiveX control in Sony ...)
-	TODO: check
+	NOT-FOR-US: Sony Network Camera SNC-P5 1.0
 CVE-2007-3487 (Absolute directory traversal in a certain ActiveX control in ...)
-	TODO: check
+	NOT-FOR-US: Hewlett-Packard (HP) Photo Digital Imaging ActiveX control
 CVE-2007-3486 (Cross-site scripting (XSS) vulnerability in AltaVista search engine ...)
 	NOT-FOR-US: AltaVista
 CVE-2007-3485 (Multiple cross-site scripting (XSS) vulnerabilities in Yandex.Server ...)
@@ -69,7 +69,7 @@
 CVE-2007-3482 (Cross-domain vulnerability in Apple Safari allows remote attackers to ...)
 	NOT-FOR-US: Apple Safari
 CVE-2007-3481 (Cross-domain vulnerability in Microsoft Internet Explorer allows ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Internet Explorer
 CVE-2007-3480 (PCSoft WinDEV 11 (01F110053p) allows user-assisted remote attackers to ...)
 	NOT-FOR-US: PCSoft WinDEV
 CVE-2007-3479 (Stack-based buffer overflow in PCSoft WinDEV 11 (01F110053p) allows ...)
@@ -112,7 +112,7 @@
 CVE-2007-3464 (Check Point SofaWare Safe at Office, with firmware before Embedded NGX ...)
 	NOT-FOR-US: Check Point SofaWare Safe
 CVE-2007-3463 (** DISPUTED ** ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Windows XP SP2
 CVE-2007-3462 (Cross-site request forgery (CSRF) vulnerability in Check Point ...)
 	NOT-FOR-US: Check Point SofaWare Safe
 CVE-2007-3461 (SQL injection vulnerability in property.php in elkagroup Image Gallery ...)
@@ -120,7 +120,7 @@
 CVE-2007-3460 (Multiple PHP remote file inclusion vulnerabilities in index.php3 in ...)
 	NOT-FOR-US: EVA-Web
 CVE-2007-3459 (A certain ActiveX control in Avaxswf.dll 1.0.0.1 in Civitech Avax ...)
-	TODO: check
+	NOT-FOR-US: Civitech Avax Vector
 CVE-2007-3458 (The libsldap library in Sun Solaris 8, 9, and 10 allows local users to ...)
 	NOT-FOR-US: Sun Solaris libsldap
 CVE-2007-3457