[Secure-testing-commits] r10419 - data/CVE

[atomo64-guest at alioth.debian.org]

Author: atomo64-guest
Date: 2008-11-19 03:28:20 +0000 (Wed, 19 Nov 2008)
New Revision: 10419

Modified:
   data/CVE/list
Log:
More NFUs and a new cups issue


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-11-19 02:58:09 UTC (rev 10418)
+++ data/CVE/list	2008-11-19 03:28:20 UTC (rev 10419)
@@ -1,3 +1,5 @@
+CVE-2008-XXXX [cupsd crashes when more than 100 rss subscriptions are added]
+	- cups <unfixed> (bug #506180)
 CVE-2008-XXXX [no-ip DUC remote code execution]
 	- no-ip <unfixed> (bug #506179)
 CVE-2008-5132 (SQL injection vulnerability in inc/ajax/ajax_rating.php in MemHT ...)
@@ -45,7 +47,7 @@
 CVE-2008-5109
 	RESERVED
 CVE-2008-5108 (Unspecified vulnerability in Adobe AIR 1.1 and earlier allows ...)
-	TODO: check
+	NOT-FOR-US: Adobe AIR
 CVE-2008-5107 (The installation process for Citrix Presentation Server 4.5 and ...)
 	TODO: check
 CVE-2008-5106 (Buffer overflow in KarjaSoft Sami FTP Server 2.0.x allows remote ...)
@@ -87,7 +89,7 @@
 CVE-2008-5090 (Electron Inc. Advanced Electron Forum before 1.0.7 allows remote ...)
 	NOT-FOR-US: Advanced Electron Forum
 CVE-2008-5089 (Multiple insecure method vulnerabilities in the ...)
-	TODO: check
+	NOT-FOR-US: Data Dynamics ActiveReports ActiveX control
 CVE-2008-5088 (Multiple SQL injection vulnerabilities in PHPKB Knowledge Base ...)
 	NOT-FOR-US: PHPKB
 CVE-2008-5087 (SQL injection vulnerability in TYPO3 Another Backend Login ...)
@@ -117,9 +119,9 @@
 CVE-2008-5074 (SQL injection vulnerability in index.php in the Freshlinks 1.0 RC1 ...)
 	TODO: check
 CVE-2008-5073 (Heap-based buffer overflow in an ActiveX control in Novell ZENworks ...)
-	TODO: check
+	NOT-FOR-US: Novell ZENworks ActiveX control
 CVE-2008-5072 (vsfilter.dll in K-Lite Mega Codec Pack 3.5.7.0 allows remote attackers ...)
-	TODO: check
+	NOT-FOR-US: K-Lite Mega Codec Pack
 CVE-2008-5071 (Multiple eval injection vulnerabilities in itpm_estimate.php in Yoxel ...)
 	TODO: check
 CVE-2008-5070 (SQL injection vulnerability in Pro Chat Rooms 3.0.3, when ...)