[Secure-testing-commits] r6552 - data/CVE

[thijs at alioth.debian.org]

Author: thijs
Date: 2007-09-09 14:41:35 +0000 (Sun, 09 Sep 2007)
New Revision: 6552

Modified:
   data/CVE/list
Log:
some NFU's
another bitchx


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-09-09 14:32:21 UTC (rev 6551)
+++ data/CVE/list	2007-09-09 14:41:35 UTC (rev 6552)
@@ -366,17 +366,17 @@
 CVE-2007-4587 (Cross-site scripting (XSS) vulnerability in Easy Software Cafeteria ...)
 	NOT-FOR-US: escafeWeb
 CVE-2007-4586 (Multiple buffer overflows in php_iisfunc.dll in the iisfunc extension ...)
-	TODO: check
+	NOT-FOR-US: iisfunc (windows only)
 CVE-2007-4585 (Directory traversal vulnerability in activateuser.php in 2532|Gigs ...)
-	TODO: check
+	NOT-FOR-US: 2532|Gigs
 CVE-2007-4584 (Stack-based buffer overflow in BitchX 1.1 Final allows remote IRC ...)
-	TODO: check
+	- ircii-pana <unfixed>
 CVE-2007-4583 (Multiple absolute path traversal vulnerabilities in the ...)
-	TODO: check
+	NOT-FOR-US: ACTi Network Video Recorder
 CVE-2007-4582 (Buffer overflow in the nvUnifiedControl.AUnifiedControl.1 ActiveX ...)
-	TODO: check
+	NOT-FOR-US: ACTi Network Video Recorder
 CVE-2007-4581 (SQL injection vulnerability in acrotxt.php in WBB2-Addon: Acrotxt 1 ...)
-	TODO: check
+	NOT-FOR-US: WBB2-Addon: Acrotxt 1
 CVE-2007-4601 (A regression error in tcp-wrappers 7.6.dbs-10 and 7.6.dbs-11 does not ...)
 	- tcp-wrappers 7.6.dbs-12 (bug #405342; medium)
 	[etch] - tcp-wrappers <not-affected> (Vulnerability was introduced in -10)
@@ -385,7 +385,6 @@
 	NOT-FOR-US: BufferZone (Windows)
 CVE-2007-4579
 	REJECTED
-	NOT-FOR-US: MSN
 CVE-2007-4578 (Sophos Anti-Virus for Windows and for Unix/Linux before 2.48.0 allows ...)
 	NOT-FOR-US: Sophos
 CVE-2007-4577 (Sophos Anti-Virus for Unix/Linux before 2.48.0 allows remote attackers ...)