[Secure-testing-commits] r6558 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2007-09-09 21:01:56 +0000 (Sun, 09 Sep 2007)
New Revision: 6558

Modified:
   data/CVE/list
Log:
NFUs
CVE-2007-4476 of tar fixed in unstable, etch and sarge affected, reported as #441444


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-09-09 19:57:23 UTC (rev 6557)
+++ data/CVE/list	2007-09-09 21:01:56 UTC (rev 6558)
@@ -611,7 +611,7 @@
 CVE-2007-4477 (The administration interface in the Planet VC-200M VDSL2 router allows ...)
 	NOT-FOR-US: Planet VC-200M VDSL2 router
 CVE-2007-4476 (Buffer overflow in the safer_name_suffix function in GNU tar has ...)
-	TODO: check
+	- tar 1.18-1 (low; bug #441444)
 CVE-2007-4475
 	RESERVED
 CVE-2007-4474
@@ -619,9 +619,9 @@
 CVE-2007-4473
 	RESERVED
 CVE-2007-4472 (Multiple buffer overflows in the Broderbund Expressit 3DGreetings ...)
-	TODO: check
+	NOT-FOR-US: Broderbund Expressit
 CVE-2007-4471 (Multiple unspecified vulnerabilities in the Intuit QuickBooks Online ...)
-	TODO: check
+	NOT-FOR-US: QuickBooks
 CVE-2007-4470
 	RESERVED
 CVE-2007-4469
@@ -633,11 +633,11 @@
 CVE-2007-4466
 	RESERVED
 CVE-2006-7222 (Buffer overflow in the CFLICStream::_deltachunk function in ...)
-	TODO: check
+	NOT-FOR-US: Media Player Classic
 CVE-2003-1335 (Directory traversal vulnerability in Kai Blankenhorn Bitfolge simple ...)
-	TODO: check
+	NOT-FOR-US: snif
 CVE-2003-1334 (Cross-site scripting (XSS) vulnerability in Kai Blankenhorn Bitfolge ...)
-	TODO: check
+	NOT-FOR-US: snif
 CVE-2007-4465
 	RESERVED
 CVE-2007-4464 (CRLF injection vulnerability in the Fileinfo 2.0.9 plugin for Total ...)