[Secure-testing-commits] r10067 - data/CVE

[white at alioth.debian.org]

Author: white
Date: 2008-10-13 11:59:29 +0000 (Mon, 13 Oct 2008)
New Revision: 10067

Modified:
   data/CVE/list
Log:
Some NFUs

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-10-12 21:14:13 UTC (rev 10066)
+++ data/CVE/list	2008-10-13 11:59:29 UTC (rev 10067)
@@ -322,7 +322,7 @@
 CVE-2008-4395
 	RESERVED
 CVE-2008-4394 (Multiple untrusted search path vulnerabilities in Portage before ...)
-	TODO: check
+	NOT-FOR-US: Gentoo package manager Portage
 CVE-2008-4393 (Cross-site scripting (XSS) vulnerability in VeriSign Kontiki Delivery ...)
 	NOT-FOR-US: VeriSign Kontiki
 CVE-2008-4392
@@ -591,7 +591,7 @@
 CVE-2008-4280
 	RESERVED
 CVE-2008-4279 (The CPU hardware emulation for 64-bit guest operating systems in ...)
-	TODO: check
+	NOT-FOR-US: VMware Workstation
 CVE-2008-4278 (VMware VirtualCenter 2.5 before Update 3 build 119838 on Windows ...)
 	NOT-FOR-US: VMWare VirtualCenter
 CVE-2008-4277
@@ -717,15 +717,15 @@
 CVE-2008-4216
 	RESERVED
 CVE-2008-4215 (Weblog in Mac OS X Server 10.4.11 does not properly check an error ...)
-	TODO: check
+	NOT-FOR-US: Weblog Mac OS X
 CVE-2008-4214 (Unspecified vulnerability in Script Editor in Mac OS X 10.4.11 and ...)
-	TODO: check
+	NOT-FOR-US: Script Editor in Mac OS X
 CVE-2008-4213
 	RESERVED
 CVE-2008-4212 (Unspecified vulnerability in rlogind in the rlogin component in Mac OS ...)
 	TODO: check
 CVE-2008-4211 (Integer signedness error in QuickLook in Mac OS X 10.5.5 allows remote ...)
-	TODO: check
+	NOT-FOR-US: QuickLook Mac OS X
 CVE-2008-4210 (fs/open.c in the Linux kernel before 2.6.22 does not properly strip ...)
 	- linux-2.6 2.6.22-1
 	NOTE: easily exploitable but of limited use as the attacker already needs access to a