[Secure-testing-commits] r6729 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2007-09-27 22:28:12 +0000 (Thu, 27 Sep 2007)
New Revision: 6729

Modified:
   data/CVE/list
Log:
NFUs
CVE-2007-5106 fixed in wordpress 2.0.2-1


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-09-27 21:46:51 UTC (rev 6728)
+++ data/CVE/list	2007-09-27 22:28:12 UTC (rev 6729)
@@ -1,23 +1,23 @@
 CVE-2007-5115 (Multiple PHP remote file inclusion vulnerabilities in Ekke Doerre ...)
-	TODO: check
+	NOT-FOR-US: Ekke Doerre Contenido
 CVE-2007-5114 (** DISPUTED ** PHP remote file inclusion vulnerability in ...)
-	TODO: check
+	NOT-FOR-US: phpmyProfiler
 CVE-2007-5113 (report.cgi in Google Urchin allows remote attackers to bypass ...)
-	TODO: check
+	NOT-FOR-US: Google Urchin
 CVE-2007-5112 (Cross-site scripting (XSS) vulnerability in session.cgi (aka the login ...)
-	TODO: check
+	NOT-FOR-US: Google Urchin
 CVE-2007-5111 (A certain ActiveX control in EBCRYPT.DLL 2.0 in EB Design ebCrypt ...)
-	TODO: check
+	NOT-FOR-US: ebCrypt
 CVE-2007-5110 (Absolute path traversal vulnerability in the ...)
-	TODO: check
+	NOT-FOR-US: ebCrypt
 CVE-2007-5109 (Cross-site request forgery (CSRF) vulnerability in index.php in ...)
-	TODO: check
+	NOT-FOR-US: flatnuke
 CVE-2007-5108 (Unspecified vulnerability in IAC Search & Media ask.com toolbar has ...)
-	TODO: check
+	NOT-FOR-US: IAC Search & Media ask.com toolbar
 CVE-2007-5107 (Stack-based buffer overflow in the AskJeevesToolBar.SettingsPlugin.1 ...)
-	TODO: check
+	NOT-FOR-US: AskJeevesToolBar
 CVE-2007-5106 (Cross-site scripting (XSS) vulnerability in wp-register.php in ...)
-	TODO: check
+	- wordpress 2.0.2-1 (low)
 CVE-2007-5105 (Cross-site scripting (XSS) vulnerability in wp-register.php in ...)
 	TODO: check
 CVE-2007-5104 (SQL injection vulnerability in index.php in the Arcade module in bcoos ...)