[Secure-testing-commits] r7076 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2007-10-23 15:35:44 +0000 (Tue, 23 Oct 2007)
New Revision: 7076

Modified:
   data/CVE/list
Log:
NFUs
new issue: CVE-2007-5588 mnogosearch (low)


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-10-23 15:01:20 UTC (rev 7075)
+++ data/CVE/list	2007-10-23 15:35:44 UTC (rev 7076)
@@ -67,17 +67,17 @@
 	- drupal5 5.3-1
 	- drupal 4.7.8-1
 CVE-2007-5592 (Multiple PHP remote file inclusion vulnerabilities in awzMB 4.2 beta 1 ...)
-	TODO: check
+	NOT-FOR-US: awzMB
 CVE-2007-5591 (The CS1000 signaling server in Nortel Enterprise VoIP-Core-CS 1000M ...)
-	TODO: check
+	NOT-FOR-US: Nortel Enterprise VoIP-Core-CS
 CVE-2007-5590 (Multiple buffer overflows in Miranda before 0.7.1 allow remote ...)
-	TODO: check
+	NOT-FOR-US: Miranda
 CVE-2007-5588 (Cross-site scripting (XSS) vulnerability in mnoGoSearch before 3.2.43 ...)
-	TODO: check
+	- mnogosearch <unfixed> (low; bug #447753)
 CVE-2007-5587 (Buffer overflow in Macrovision SafeDisc secdrv.sys, as shipped in ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Windows
 CVE-2007-5586 (Unspecified vulnerability in a driver in Microsoft Windows XP SP2 and ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Windows
 CVE-2007-5585 (xscreensaver 5.03 and earlier, when running without ...)
 	TODO: check
 CVE-2007-5584
@@ -516,7 +516,7 @@
 CVE-2007-5473 (StaticFileHandler.cs in System.Web in Mono before 1.2.5.2, when ...)
 	- mono <not-affected> (Windows-specific vulnerability)
 CVE-2007-5472 (Cross-site scripting (XSS) vulnerability in the Server component in CA ...)
-	TODO: check
+	NOT-FOR-US: HIPS
 CVE-2003-1373 (Directory traversal vulnerability in auth.php for PhpBB 1.4.0 through ...)
 	- phpbb2 <not-affected> (phpbb was the vulnerable one)
 CVE-2003-1372 (Cross-site scripting (XSS) vulnerability in links.php script in ...)