[Secure-testing-commits] r8807 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2008-05-14 14:49:26 +0000 (Wed, 14 May 2008)
New Revision: 8807

Modified:
   data/CVE/list
Log:
NFUs
CVE-2008-1880 firebird2 removed, firebird2.0 not affected


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-05-14 14:34:24 UTC (rev 8806)
+++ data/CVE/list	2008-05-14 14:49:26 UTC (rev 8807)
@@ -616,7 +616,11 @@
 	{DTSA-125-1}
 	- vlc 0.8.6.e-2.1 (medium; bug #477805)
 CVE-2008-1880 (The default configuration of Firebird before 2.0.3.12981.0-r6 on ...)
-	TODO: check
+	- firebird2 <removed>
+	- firebird2.0 <not-affected> (Gentoo specific problem)
+	NOTE: on debian after the installation firebird2.0-super is disabled, to enable it
+	NOTE: you need to call dpkg-reconfigure which then asks for a passwort or generates
+	NOTE: a random one
 CVE-2008-1879
 	RESERVED
 CVE-2007-6715 (Mozilla Firefox allows remote attackers to cause a denial of service ...)
@@ -1077,7 +1081,7 @@
 CVE-2008-1678
 	RESERVED
 CVE-2008-1677 (Buffer overflow in the regular expression handler in Red Hat Directory ...)
-	TODO: check
+	NOT-FOR-US: Red Hat Directory Server
 CVE-2008-1676
 	RESERVED
 CVE-2008-1675 (The bdx_ioctl_priv function in the tehuti driver (tehuti.c) in Linux ...)
@@ -5786,7 +5790,7 @@
 CVE-2007-6340 (Geert Moernaut LSrunasE 1.0 and Supercrypt 1.0 use the RC4 stream ...)
 	NOT-FOR-US: Geert Moernaut LSrunasE and Supercrypt
 CVE-2007-6339 (The Akamai Download Manager (aka DLM or dlmanager) ActiveX control ...)
-	TODO: check
+	NOT-FOR-US: Akamai Download Manager
 CVE-2007-6338 (SQL injection vulnerability in userlogin.jsp in Trivantis CourseMill ...)
 	NOT-FOR-US: Trivantis CourseMill Enterprise Learning Management System
 CVE-2007-6337 (Unspecified vulnerability in the bzip2 decompression algorithm in ...)
@@ -27403,7 +27407,7 @@
 CVE-2006-4728
 	RESERVED
 CVE-2006-4727 (Cross-site scripting (XSS) vulnerability in emfadmin/statusView.do in ...)
-	TODO: check
+	NOT-FOR-US: Tumbleweed EMF Administration Module
 CVE-2006-4726 (Cross-site scripting (XSS) vulnerability in Adobe ColdFusion MX 6.1 ...)
 	NOT-FOR-US: Adobe
 CVE-2006-4725 (Adobe ColdFusion MX 7 and 7.01 allows local users to bypass security ...)