[Secure-testing-commits] r8124 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2008-02-10 20:19:43 +0000 (Sun, 10 Feb 2008)
New Revision: 8124

Modified:
   data/CVE/list
Log:
NFUs

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-02-10 17:57:47 UTC (rev 8123)
+++ data/CVE/list	2008-02-10 20:19:43 UTC (rev 8124)
@@ -296,7 +296,7 @@
 CVE-2007-6696 (Multiple cross-site scripting (XSS) vulnerabilities in WebCalendar ...)
 	TODO: check
 CVE-2007-6695 (Cross-site scripting (XSS) vulnerability in index.php in Drake CMS ...)
-	TODO: check
+	NOT-FOR-US: Drake CMS
 CVE-2008-0664 [unauthorized content modification via xml-rpc in wordpress]
 	- wordpress 2.3.3-1 (medium; bug #464170)
 	NOTE: The blog has to provide user accounts
@@ -2259,7 +2259,7 @@
 	- libnet-dns-perl <unfixed> (low; bug #457445)
 	NOTE: maybe this should be unimportant as applications using net-dns should handle this croak
 CVE-2007-6340 (Geert Moernaut LSrunasE 1.0 and Supercrypt 1.0 use the RC4 stream ...)
-	TODO: check
+	NOT-FOR-US: Geert Moernaut LSrunasE and Supercrypt
 CVE-2007-6339
 	RESERVED
 CVE-2007-6338 (SQL injection vulnerability in userlogin.jsp in Trivantis CourseMill ...)
@@ -4538,7 +4538,7 @@
 CVE-2007-5603 (Stack-based buffer overflow in the SonicWall SSL-VPN NetExtender ...)
 	NOT-FOR-US: SonicWall SSL-VPN NetExtender
 CVE-2007-5602 (Multiple stack-based buffer overflows in SwiftView Viewer before ...)
-	TODO: check
+	NOT-FOR-US: SwiftView Viewer
 CVE-2007-5601 (Stack-based buffer overflow in the Database Component in MPAMedia.dll ...)
 	NOT-FOR-US: RealPlayer (windows only issue)
 CVE-2007-5600 (Incomplete blacklist vulnerability in index.php in Artmedic CMS 3.4 ...)