[Secure-testing-commits] r5787 - data/CVE

[Florian Weimer]

Author: fw
Date: 2007-05-05 10:58:32 +0000 (Sat, 05 May 2007)
New Revision: 5787

Modified:
   data/CVE/list
Log:
Use NOTE: instead of NOT-FOR-US: for duplicates


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-05-05 10:32:18 UTC (rev 5786)
+++ data/CVE/list	2007-05-05 10:58:32 UTC (rev 5787)
@@ -90,7 +90,7 @@
 CVE-2007-2437 (The X render (Xrender) extension in X.org X Window System 7.0, 7.1, ...)
 	TODO: check
 CVE-2007-2436 (The nl_fib_lookup function in net/ipv4/fib_frontend.c in Linux Kernel ...)
-	NOT-FOR-US: Duplicate of CVE-2007-1861
+	NOTE: Duplicate of CVE-2007-1861
 CVE-2007-2435 (Sun Java Web Start in JDK and JRE 5.0 Update 10 and earlier, and Java ...)
 	TODO: check
 CVE-2007-2434 (Buffer overflow in asnsp.dll in Aventail Connect 4.1.2.13 allows ...)
@@ -1283,7 +1283,7 @@
 	- php5 5.2.0-11 (medium)
 	NOTE: php5 is vulnerable due to improper use of the system sqlite libs
 CVE-2007-1886 (Integer overflow in the str_replace function in PHP 4.4.5 and PHP ...)
-	NOT-FOR-US: Duplicate of CVE-2007-1885
+	NOTE: Duplicate of CVE-2007-1885
 CVE-2007-1885 (Integer overflow in the str_replace function in PHP 4 before 4.4.5 and ...)
 	NOTE: Dupe of CVE-2007-0906; Fixed in DSA-1264, php5 5.2.0-9, php4 6:4.4.4-9
 CVE-2007-1884 (Multiple integer signedness errors in the printf function family in ...)
@@ -1481,7 +1481,7 @@
 CVE-2007-1795 (JCcorp URLshrink 1.3.1 allows remote attackers to execute arbitrary ...)
 	NOT-FOR-US: URLshrink
 CVE-2007-1794 (The Javascript engine in Mozilla 1.7 and earlier on Sun Solaris 8, 9, ...)
-	NOT-FOR-US: Duplicate of CVE-2006-3805
+	NOTE: Duplicate of CVE-2006-3805
 CVE-2007-1793 (SPBBCDrv.sys in Symantec Norton Personal Firewall 2006 9.1.0.33 and ...)
 	NOT-FOR-US: Symantec Norton Personal Firewall
 CVE-2007-1792
@@ -17743,7 +17743,8 @@
 	NOT-FOR-US: PHP-Nuke
 CVE-2006-1845
 	REJECTED
-	NOT-FOR-US: exchange (Duplicate of CVE-2006-0537)
+	NOT-FOR-US: Microsoft Exchange
+	NOTE: Duplicate of CVE-2006-0537
 CVE-2006-1844 (The Debian installer for the (1) shadow 4.0.14 and (2) base-config ...)
 	[sarge] - shadow 1:4.0.3-31sarge8
 	[sarge] - base-config <not-affected>
@@ -25895,7 +25896,6 @@
 	{DSA-905-1}
 	- mantis 0.19.3-0.1 (bug #330682; low)
 CVE-2005-3337 (Multiple cross-site scripting (XSS) vulnerabilities in Mantis before ...)
-	NOT-FOR-US: Duplicate, will be rejected soon
 	NOTE: This is a duplicate of CVE-2005-3091 (first issue) and CVE-2005-2557 (second
 	NOTE: issue). This will be rejected.
 CVE-2005-3336 (SQL injection vulnerability in Mantis 1.0.0RC2 and 0.19.2 allows ...)