[Secure-testing-commits] r8138 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2008-02-11 21:55:53 +0000 (Mon, 11 Feb 2008)
New Revision: 8138

Modified:
   data/CVE/list
Log:
NFUs
CVE-2008-0657 fixed in sun-java6 6-02-1, sun-java5 1.5.0-14-1
deluge-torrent cveified


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-02-11 21:14:09 UTC (rev 8137)
+++ data/CVE/list	2008-02-11 21:55:53 UTC (rev 8138)
@@ -1,41 +1,43 @@
 CVE-2008-0663 (Novell Challenge Response Client (LCM) 2.7.5 and earlier, as used with ...)
-	TODO: check
+	NOT-FOR-US: Novell Challenge Response Client
 CVE-2008-0662 (The Auto Local Logon feature in Check Point VPN-1 ...)
-	TODO: check
+	NOT-FOR-US: SecuRemote/SecureClient NGX R60 and R56
 CVE-2008-0661 (Buffer overflow in dBpowerAMP Audio Player Release 2 allows remote ...)
-	TODO: check
+	NOT-FOR-US: dBpowerAMP Audio Player
 CVE-2008-0660 (Multiple stack-based buffer overflows in Aurigma Image Uploader ...)
-	TODO: check
+	NOT-FOR-US: Aurigma Image Uploader
 CVE-2008-0659 (Stack-based buffer overflow in Aurigma Image Uploader ActiveX control ...)
-	TODO: check
+	NOT-FOR-US: Aurigma Image Uploader
 CVE-2008-0658
 	RESERVED
 CVE-2008-0657 (Multiple unspecified vulnerabilities in the Java Runtime Environment ...)
-	TODO: check
+	- sun-java6 6-02-1
+	- sun-java5 1.5.0-14-1
+	[etch] - sun-java5 <no-dsa> (Non-free not supported)
 CVE-2008-0656 (Unrestricted file upload vulnerability in dmclTrace.jsp in EMC ...)
-	TODO: check
+	NOT-FOR-US: Documentum Administrator and Webtop
 CVE-2008-0655 (Multiple unspecified vulnerabilities in Adobe Reader before 8.1.2 have ...)
-	TODO: check
+	NOT-FOR-US: Adobe Reader
 CVE-2008-0654 (Multiple directory traversal vulnerabilities in Azucar CMS 1.3 allow ...)
-	TODO: check
+	NOT-FOR-US: Azucar CMS
 CVE-2008-0653 (SQL injection vulnerability in index.php in the Ynews (com_ynews) ...)
-	TODO: check
+	NOT-FOR-US: Ynews component for Joomla!
 CVE-2008-0652 (SQL injection vulnerability in index.php in the Downloads ...)
-	TODO: check
+	NOT-FOR-US: Downloads for Mambo and Joomla!
 CVE-2008-0651 (SQL injection vulnerability in login.php in Pedro Santana Codice CMS ...)
-	TODO: check
+	NOT-FOR-US: Pedro Santana Codice CMS
 CVE-2008-0650 (SQL injection vulnerability in login.php in Simple OS CMS 0.1c beta ...)
-	TODO: check
+	NOT-FOR-US: Simple OS CMS
 CVE-2008-0649 (SQL injection vulnerability in detail.php in Astanda Directory Project ...)
-	TODO: check
+	NOT-FOR-US: Astanda Directory Project
 CVE-2008-0648 (Multiple PHP remote file inclusion vulnerabilities in OpenSiteAdmin ...)
-	TODO: check
+	NOT-FOR-US: OpenSiteAdmin
 CVE-2008-0647 (Multiple stack-based buffer overflows in the ...)
-	TODO: check
+	NOT-FOR-US: Ourgame GLWorld
 CVE-2008-0646 (The bdecode_recursive function in include/libtorrent/bencode.hpp in ...)
-	TODO: check
+	- deluge-torrent 0.5.8.3-1 (unknown; bug #463357)
 CVE-2008-0645 (Multiple PHP remote file inclusion vulnerabilities in Portail Web Php ...)
-	TODO: check
+	NOT-FOR-US: Portail Web Php
 CVE-2008-0644
 	RESERVED
 CVE-2008-0643
@@ -375,8 +377,6 @@
 	{DSA-1492-1}
 	- wml 2.0.11-3.1 (low; bug #463907)
 	[sarge] - wml <not-affected> (Vulnerable code is patched to use mkdtemp)
-CVE-2008-XXXX [deluge-torrent unspecified remote issue]
-	- deluge-torrent 0.5.8.3-1 (unknown; bug #463357)
 CVE-2008-0501 (Directory traversal vulnerability in phpMyClub 0.0.1 allows remote ...)
 	NOT-FOR-US: phpMyClub
 CVE-2008-0500 (Multiple unspecified vulnerabilities in Mambo LaiThai 4.5.5 have ...)