[Secure-testing-commits] r6544 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2007-09-07 21:32:15 +0000 (Fri, 07 Sep 2007)
New Revision: 6544

Modified:
   data/CVE/list
Log:
NFUs
CVE-2007-4742 for claroline marked as itp
CVE-2007-4739 of reprepro fixed in 2.2.4-1


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-09-07 21:14:07 UTC (rev 6543)
+++ data/CVE/list	2007-09-07 21:32:15 UTC (rev 6544)
@@ -1,37 +1,38 @@
 CVE-2007-4748 (Buffer overflow in the PowerPlayer.dll ActiveX control in PPStream ...)
-	TODO: check
+	NOT-FOR-US: PowerPlayer
 CVE-2007-4747 (The telnet service in Cisco Video Surveillance IP Gateway ...)
-	TODO: check
+	NOT-FOR-US: Cisco firmware
 CVE-2007-4746 (The Cisco Video Surveillance IP Gateway Encoder/Decoder (Standalone ...)
-	TODO: check
+	NOT-FOR-US: Cisco firmware
 CVE-2007-4745 (Multiple cross-site scripting (XSS) vulnerabilities in the AkoBook ...)
-	TODO: check
+	NOT-FOR-US: AkoBook
 CVE-2007-4744 (PHP remote file inclusion vulnerability in environment.php in ...)
-	TODO: check
+	NOT-FOR-US: AnyInventory
 CVE-2007-4742 (Claroline before 1.8.6 allows remote authenticated administrators to ...)
-	TODO: check
+	- claroline <itp> (bug #386911)
 CVE-2007-4741 (Cross-site scripting (XSS) vulnerability in admin/adminusers.php in ...)
-	TODO: check
+	- claroline <itp> (bug #386911)
 CVE-2007-4740 (The HPRevolutionRegistryManager ActiveX control in ...)
-	TODO: check
+	NOT-FOR-US: HPRevolutionRegistryManager
 CVE-2007-4739 (reprepro 1.3.0 through 2.2.3 does not properly verify signatures when ...)
-	TODO: check
+	- reprepro 2.2.4-1 (high; bug #440535)
+	NOTE: patch for etch in the BTS
 CVE-2007-4738 (Multiple PHP remote file inclusion vulnerabilities in SpeedTech PHP ...)
-	TODO: check
+	NOT-FOR-US: SpeedTech PHP Library
 CVE-2007-4737 (Multiple PHP remote file inclusion vulnerabilities in SpeedTech PHP ...)
-	TODO: check
+	NOT-FOR-US: SpeedTech PHP Library
 CVE-2007-4736 (SQL injection vulnerability in category.php in CartKeeper CKGold ...)
-	TODO: check
+	NOT-FOR-US: CartKeeper CKGold Shopping Cart
 CVE-2007-4735 (Buffer overflow in Next Generation Software Virtual DJ (VDJ) 5.0 ...)
-	TODO: check
+	NOT-FOR-US: Virtual DJ
 CVE-2007-4734 (Buffer overflow in Ots Labs OTSTurntables 1.00 allows user-assisted ...)
-	TODO: check
+	NOT-FOR-US: OTSTurntables
 CVE-2007-4733 (The Aztech DSL600EU router, when WAN access to the web interface is ...)
-	TODO: check
+	NOT-FOR-US: Aztech firmware
 CVE-2007-4732 (Unspecified vulnerability in the strfreectty function in the Special ...)
-	TODO: check
+	NOT-FOR-US: Special File System
 CVE-2004-2685 (Buffer overflow in YoungZSoft CCProxy 6.2 and earlier allows remote ...)
-	TODO: check
+	NOT-FOR-US: Ccproxy
 CVE-2007-4743 (The original patch for CVE-2007-3999 in svc_auth_gss.c in the ...)
 	{DSA-1367-1}
 	- krb5 1.6.dfsg.1-7 (high; bug #441209)