[Secure-testing-commits] r6923 - data/CVE

[white at alioth.debian.org]

Author: white
Date: 2007-10-13 05:27:50 +0000 (Sat, 13 Oct 2007)
New Revision: 6923

Modified:
   data/CVE/list
Log:
NFUs; new phpmyadmin issue, patch sent to BTS; new tk8.3 issue, needs investigation

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-10-12 21:14:07 UTC (rev 6922)
+++ data/CVE/list	2007-10-13 05:27:50 UTC (rev 6923)
@@ -1,31 +1,31 @@
 CVE-2007-5391 (Unspecified vulnerability in HP Select Identity 4.01 through 4.01.010 ...)
-	TODO: check
+	NOT-FOR-US: HP Select Identity
 CVE-2007-5390 (PHP remote file inclusion vulnerability in index.php in PicoFlat CMS ...)
-	TODO: check
+	NOT-FOR-US: PicoFlat
 CVE-2007-5389 (** DISPUTED ** ...)
 	TODO: check
 CVE-2007-5388 (Multiple PHP remote file inclusion vulnerabilities in WebDesktop 0.1 ...)
-	TODO: check
+	NOT-FOR-US: WebDesktop
 CVE-2007-5387 (PHP remote file inclusion vulnerability in ...)
-	TODO: check
+	NOT-FOR-US: Pindorama
 CVE-2007-5386 (Cross-site scripting (XSS) vulnerability in scripts/setup.php in ...)
-	TODO: check
+	- phpmyadmin <unfixed> (medium; bug #446451) 
 CVE-2007-5385 (Multiple cross-site scripting (XSS) vulnerabilities in the ...)
-	TODO: check
+	NOT-FOR-US: Thomson/Alcatel SpeedTouch 7G router
 CVE-2007-5384 (Multiple cross-site request forgery (CSRF) vulnerabilities in the ...)
-	TODO: check
+	NOT-FOR-US: Thomson/Alcatel SpeedTouch 7G router
 CVE-2007-5383 (The Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub, ...)
-	TODO: check
+	NOT-FOR-US: Thomson/Alcatel SpeedTouch 7G router
 CVE-2007-5382 (The conversion utility for converting CiscoWorks Wireless LAN Solution ...)
-	TODO: check
+	NOT-FOR-US: CiscoWorks
 CVE-2007-5381 (Stack-based buffer overflow in the Line Printer Daemon (LPD) in Cisco ...)
-	TODO: check
+	NOT-FOR-US: Line Printer Daemon (LPD) Cisco
 CVE-2007-5380
 	RESERVED
 CVE-2007-5379
 	RESERVED
 CVE-2007-5378 (Buffer overflow in the FileReadGIF function in tkImgGIF.c for Tk ...)
-	TODO: check
+	- tk8.3 <unfixed> (low)
 CVE-2007-5377 (The (1) tramp-make-temp-file and (2) tramp-make-tramp-temp-file ...)
 	TODO: check
 CVE-2007-5376