[Secure-testing-commits] r7306 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2007-11-15 13:37:13 +0000 (Thu, 15 Nov 2007)
New Revision: 7306

Modified:
   data/CVE/list
Log:
NFUs

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-11-15 13:28:43 UTC (rev 7305)
+++ data/CVE/list	2007-11-15 13:37:13 UTC (rev 7306)
@@ -455,9 +455,9 @@
 CVE-2007-5757
 	RESERVED
 CVE-2007-5756 (Multiple array index errors in the bpf_filter_init function in NPF.SYS ...)
-	TODO: check
+	NOT-FOR-US: WinPcap
 CVE-2007-5755 (Multiple stack-based buffer overflows in the AOL AmpX ActiveX control ...)
-	TODO: check
+	NOT-FOR-US: AOL Radio
 CVE-2007-5754 (PHP remote file inclusion vulnerability in urlinn_includes/config.php ...)
 	NOT-FOR-US: phpFaber
 CVE-2007-5753 (Unspecified vulnerability in Light FMan PHP (lfman or lightfman) ...)
@@ -960,7 +960,7 @@
 CVE-2007-5668
 	RESERVED
 CVE-2007-5667 (NWFILTER.SYS in Novell Client 4.91 SP 1 through SP 4 for Windows 2000, ...)
-	TODO: check
+	NOT-FOR-US: Novell Client
 CVE-2007-5666
 	RESERVED
 CVE-2007-5665
@@ -1900,7 +1900,7 @@
 CVE-2007-5397
 	RESERVED
 CVE-2007-5396 (Format string vulnerability in the ext_yahoo_contact_added function in ...)
-	TODO: check
+	NOT-FOR-US: Miranda
 CVE-2007-5395 (Stack-based buffer overflow in the separate_word function in ...)
 	- link-grammar 4.2.5-1 (medium; bug #450695)
 CVE-2007-5394
@@ -5069,7 +5069,7 @@
 	- qt-x11-free 3:3.3.7-8 (medium; bug #442780)
 	- qt4-x11 <not-affected> (Not exploitable according to upstream)
 CVE-2007-4136 (The ricci daemon in Conga 0.10.0 allows remote attackers to cause a ...)
-	TODO: check
+	NOT-FOR-US: Conga
 CVE-2007-4135 (The NFSv4 ID mapper (nfsidmap) before 0.17 does not properly handle ...)
 	- libnfsidmap 0.18-0 (low; bug #442935)
 	NOTE: https://issues.rpath.com/browse/RPL-1731
@@ -5609,7 +5609,7 @@
 CVE-2007-3899 (Unspecified vulnerability in Microsoft Word 2000 SP3, Word 2002 SP3, ...)
 	NOT-FOR-US: Microsoft Word
 CVE-2007-3898 (The DNS server in Microsoft Windows 2000 Server SP4, and Server 2003 ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Windows
 CVE-2007-3897 (Heap-based buffer overflow in Microsoft Outlook Express 6 and earlier, ...)
 	NOT-FOR-US: Outlook Express
 CVE-2007-3896 (The URL handling in Shell32.dll in the Windows shell in Microsoft ...)
@@ -5645,7 +5645,7 @@
 CVE-2007-3881 (SQL injection vulnerability in index.php in Pictures Rating (Picture ...)
 	NOT-FOR-US: Pictures Rating
 CVE-2007-3880 (Format string vulnerability in srsexec in Sun Remote Services (SRS) ...)
-	TODO: check
+	NOT-FOR-US: Net Connect 
 CVE-2007-3879
 	RESERVED
 CVE-2007-3878