[Secure-testing-commits] r10682 - data/CVE

[atomo64-guest at alioth.debian.org]

Author: atomo64-guest
Date: 2008-12-12 21:28:30 +0000 (Fri, 12 Dec 2008)
New Revision: 10682

Modified:
   data/CVE/list
Log:
rsyslog fixed, NFUs


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-12-12 21:14:14 UTC (rev 10681)
+++ data/CVE/list	2008-12-12 21:28:30 UTC (rev 10682)
@@ -99,37 +99,37 @@
 CVE-2008-5436
 	RESERVED
 CVE-2008-5435 (Cross-site scripting (XSS) vulnerability in moderate.php in PunBB ...)
-	TODO: check
+	NOT-FOR-US: PunBB
 CVE-2008-5434 (Multiple SQL injection vulnerabilities in PunBB 1.3 and 1.3.1 allow ...)
-	TODO: check
+	NOT-FOR-US: PunBB
 CVE-2008-5433 (Cross-site scripting (XSS) vulnerability in login.php in PunBB 1.3 and ...)
-	TODO: check
+	NOT-FOR-US: PunBB
 CVE-2008-5432 (Cross-site scripting (XSS) vulnerability in Moodle before 1.6.8, 1.7 ...)
 	TODO: check
 CVE-2008-5431 (Teamtek Universal FTP Server 1.0.44 allows remote attackers to cause a ...)
-	TODO: check
+	NOT-FOR-US: Teamtek Universal FTP Server
 CVE-2008-5430 ( ...)
 	TODO: check
 CVE-2008-5429 (Incredimail build 5853710 does not properly handle (1) multipart/mixed ...)
-	TODO: check
+	NOT-FOR-US: Incredimail
 CVE-2008-5428 (Opera 9.51 on Windows XP does not properly handle (1) multipart/mixed ...)
-	TODO: check
+	NOT-FOR-US: Opera
 CVE-2008-5427 (Norton Antivirus in Norton Internet Security 15.5.0.23 does not ...)
-	TODO: check
+	NOT-FOR-US: Norton Internet Security
 CVE-2008-5426 (Kaspersky Internet Security Suite 2009 does not properly handle (1) ...)
-	TODO: check
+	NOT-FOR-US: Kaspersky Internet Security Suite
 CVE-2008-5425 (ESet NOD32 2.70.0039.0000 does not properly handle (1) multipart/mixed ...)
-	TODO: check
+	NOT-FOR-US: NOD32
 CVE-2008-5424 (The MimeOleClearDirtyTree function in InetComm.dll in Microsoft ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Outlook Express
 CVE-2008-5423 (Sun Sun Ray Server Software 3.x and 4.0 and Sun Ray Windows Connector ...)
-	TODO: check
+	NOT-FOR-US: Sun Ray Software
 CVE-2008-5422 (Sun Sun Ray Server Software 3.1 through 4.0 does not properly restrict ...)
-	TODO: check
+	NOT-FOR-US: Sun Sun Ray Server Software
 CVE-2008-5421 (The SSL web administration service in NetWin SmsGate 1.1n and earlier ...)
-	TODO: check
+	NOT-FOR-US: NetWin SmsGate
 CVE-2006-7235 (Teamtek Universal FTP Server 1.0.50 allows remote attackers to cause a ...)
-	TODO: check
+	NOT-FOR-US: Teamtek Universal FTP Server
 CVE-2008-5420 (The SAN Manager Master Agent service (aka msragent.exe) in EMC Control ...)
 	NOT-FOR-US: SAN Manager Master Agent
 CVE-2008-5419 (Stack-based buffer overflow in SAN Manager Master Agent service (aka ...)
@@ -251,7 +251,7 @@
 CVE-2008-XXXX [phpMyAdmin PMASA-2008-10 SQL injection]
 	- phpmyadmin 4:2.11.8.1-5
 CVE-2008-XXXX [RSyslog "AllowedSender" Security Bypass Vulnerability]
-	- rsyslog <unfixed> (bug #508027)
+	- rsyslog 3.18.6-1 (bug #508027)
 CVE-2008-XXXX [phpPgAdmin: Local File Inclusion Vulnerability]
 	- phppgadmin <unfixed> (bug #508026)
 	NOTE: register_globals=on is required