[Secure-testing-commits] r7195 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2007-11-02 10:27:14 +0000 (Fri, 02 Nov 2007)
New Revision: 7195

Modified:
   data/CVE/list
Log:
NFUs

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-11-02 10:19:12 UTC (rev 7194)
+++ data/CVE/list	2007-11-02 10:27:14 UTC (rev 7195)
@@ -30,7 +30,7 @@
 CVE-2007-5780 (PHP remote file inclusion vulnerability in pub/pub08_comments.php in ...)
 	NOT-FOR-US: teatro
 CVE-2007-5779 (Buffer overflow in the GomManager (GomWeb Control) ActiveX control in ...)
-	TODO: check
+	NOT-FOR-US: Gretech Online Movie Player
 CVE-2007-5778 (Mobile Spy (1) stores login credentials in cleartext under the ...)
 	NOT-FOR-US: Mobile Spy
 CVE-2007-5777 (Blue-Collar Productions i-Gallery 3.4 stores sensitive information ...)
@@ -2486,9 +2486,9 @@
 CVE-2002-2227 (Buffer underflow in ssldump 0.9b2 and earlier allows remote attackers ...)
 	- ssldump 0.9b3-1 (low)
 CVE-2007-5081 (Heap-based buffer overflow in RealNetworks RealPlayer 8, 10 and 10.1; ...)
-	TODO: check
+	NOT-FOR-US: RealPlayer
 CVE-2007-5080 (Integer overflow in RealNetworks RealPlayer 10 and 10.5, RealOne ...)
-	TODO: check
+	NOT-FOR-US: RealPlayer
 CVE-2007-5079 (Red Hat Enterprise Linux 4 does not properly compile and link gdm with ...)
 	- gdm <not-affected> (Red Hat-specific packaging flaw)
 CVE-2007-5078 (Multiple cross-site scripting (XSS) vulnerabilities in eGov Manager ...)
@@ -2985,11 +2985,11 @@
 CVE-2007-4864
 	RESERVED
 CVE-2007-4863 (SQL injection vulnerability in example.php in SAXON 5.4 allows remote ...)
-	TODO: check
+	NOT-FOR-US: SAXON
 CVE-2007-4862 (Cross-site scripting (XSS) vulnerability in admin/menu.php in SAXON ...)
-	TODO: check
+	NOT-FOR-US: SAXON
 CVE-2007-4861 (SAXON 5.4, with display_errors enabled, allows remote attackers to ...)
-	TODO: check
+	NOT-FOR-US: SAXON
 CVE-2007-4860
 	RESERVED
 CVE-2007-4859
@@ -3605,7 +3605,7 @@
 CVE-2007-4600 (The &quot;Protect Worksheet&quot; functionality in Mathsoft Mathcad 12 through ...)
 	NOT-FOR-US: Mathsoft Mathcad
 CVE-2007-4599 (Stack-based buffer overflow in RealNetworks RealPlayer 10, and RealOne ...)
-	TODO: check
+	NOT-FOR-US: RealPlayer
 CVE-2007-4598 (IBM SurePOS 500 has (1) a default password of &quot;12345&quot; for the manager ...)
 	NOT-FOR-US: IBM
 CVE-2007-4597 (SQL injection vulnerability in index.php in TurnkeyWebTools SunShop ...)
@@ -4187,13 +4187,13 @@
 CVE-2007-4349
 	RESERVED
 CVE-2007-4348 (Cross-site scripting (XSS) vulnerability in the CAD service in IBM ...)
-	TODO: check
+	NOT-FOR-US: IBM Tivoli Storage Manager
 CVE-2007-4347
 	RESERVED
 CVE-2007-4346
 	RESERVED
 CVE-2007-4345 (Buffer overflow in IMail Client 9.22, as shipped with IPSwitch IMail ...)
-	TODO: check
+	NOT-FOR-US: IMail Client
 CVE-2007-4344
 	RESERVED
 CVE-2007-4343 (Stack-based buffer overflow in IrfanView 3.99 and 4.00 allows ...)
@@ -4334,7 +4334,7 @@
 CVE-2007-4278 (Stack-based buffer overflow in the giomgr process in ESRI ArcSDE ...)
 	NOT-FOR-US: ESRI ArcSDE
 CVE-2007-4277 (The Trend Micro AntiVirus scan engine before 8.550-1001, as used in ...)
-	TODO: check
+	NOT-FOR-US: Trend Micro AntiVirus
 CVE-2007-4276 (Stack-based buffer overflow in IBM DB2 UDB 8 before Fixpak 15 and 9.1 ...)
 	NOT-FOR-US: IBM DB2
 CVE-2007-4275 (Multiple untrusted search path vulnerabilities in IBM DB2 UDB 8 before ...)