[Secure-testing-commits] r6914 - data/CVE

[white at alioth.debian.org]

Author: white
Date: 2007-10-12 12:12:59 +0000 (Fri, 12 Oct 2007)
New Revision: 6914

Modified:
   data/CVE/list
Log:
Some NFUs, joomla (itp), new ldapscripts issue

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-10-12 10:35:03 UTC (rev 6913)
+++ data/CVE/list	2007-10-12 12:12:59 UTC (rev 6914)
@@ -1,31 +1,31 @@
 CVE-2007-5375 (Interpretation conflict in the Sun Java Virtual Machine (JVM) allows ...)
 	TODO: check
 CVE-2007-5374 (cp_memberedit.php in LightBlog 8.4.1.1 does not check for ...)
-	TODO: check
+	NOT-FOR-US: LightBlog
 CVE-2007-5373 (ldapscripts 1.4 and 1.7 sends a password as a command line argument ...)
-	TODO: check
+	- ldapscripts <unfixed> (bug #445582; medium)
 CVE-2007-5372 (Multiple SQL injection vulnerabilities in (a) LedgerSMB 1.0.0 through ...)
 	TODO: check
 CVE-2007-5371 (Multiple SQL injection vulnerabilities in mutate_content.dynamic.php ...)
-	TODO: check
+	NOT-FOR-US: MODx
 CVE-2007-5370 (Multiple cross-site scripting (XSS) vulnerabilities in ...)
-	TODO: check
+	NOT-FOR-US: NetWin
 CVE-2007-5369 (The GetMagicNumberString function in Massive Entertainment World in ...)
-	TODO: check
+	NOT-FOR-US: conflict
 CVE-2007-5368 (Multiple unspecified vulnerabilities in labeld in Trusted Extensions ...)
-	TODO: check
+	NOT-FOR-US: Sun Solaris
 CVE-2007-5367 (Unspecified vulnerability in the Virtual File System (VFS) in Sun ...)
-	TODO: check
+	NOT-FOR-US: Sun Solaris
 CVE-2007-5366 (The Tomcat 4.1-based Servlet Service in Fujitsu Interstage Application ...)
-	TODO: check
+	NOT-FOR-US: Fujitsu Interstage Application Server
 CVE-2007-5365 (Stack-based buffer overflow in the cons_options function in options.c ...)
 	TODO: check
 CVE-2007-5364 (** DISPUTED ** ...)
-	TODO: check
+	NOT-FOR-US: ViArt Shopping Cart
 CVE-2007-5363 (PHP remote file inclusion vulnerability in admin.panoramic.php in the ...)
-	TODO: check
+	- joomla <itp> (bug #326398)
 CVE-2007-5362 (Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde ...)
-	TODO: check
+	- joomla <itp> (bug #326398)
 CVE-2007-5361
 	RESERVED
 CVE-2007-5360
@@ -103,7 +103,7 @@
 CVE-2007-5324
 	RESERVED
 CVE-2007-5323 (The RepliStor Server Service in EMC Replistor 6.1.3 allows remote ...)
-	TODO: check
+	NOT-FOR-US: RepliStor Server Service
 CVE-2007-5322 (The FPOLE.OCX 6.0.8450.0 ActiveX control in Microsoft Visual FoxPro ...)
 	NOT-FOR-US: Microsoft Visual FoxPro
 CVE-2007-5321 (Directory traversal vulnerability in index.php in Verlihub Control ...)