[Secure-testing-commits] r10163 - data/CVE

fw at alioth.debian.org fw at alioth.debian.org
Sun Oct 26 13:06:21 UTC 2008


Author: fw
Date: 2008-10-26 13:06:20 +0000 (Sun, 26 Oct 2008)
New Revision: 10163

Modified:
   data/CVE/list
Log:
More NFUs

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-10-26 13:06:03 UTC (rev 10162)
+++ data/CVE/list	2008-10-26 13:06:20 UTC (rev 10163)
@@ -40,7 +40,7 @@
 	NOTE: handled in FTP mode. Since the server might directly serve
 	NOTE: HTML files anyway, this seems a remote risk.
 CVE-2008-4722 (Unspecified vulnerability in Sun Integrated Lights-Out Manager (ILOM) ...)
-	TODO: check
+	NOT-FOR-US: Sun ILOM
 CVE-2008-4721 (PHP Jabbers Post Comment 3.0 allows remote attackers to bypass ...)
 	TODO: check
 CVE-2008-4720 (Multiple PHP remote file inclusion vulnerabilities in The Gemini ...)
@@ -98,11 +98,11 @@
 CVE-2008-4694 (Unspecified vulnerability in Opera before 9.60 allows remote attackers ...)
 	NOT-FOR-US: Opera
 CVE-2008-4693 (The SORT/LIST SERVICES component in IBM DB2 9.1 before FP6 and 9.5 ...)
-	TODO: check
+	NOT-FOR-US: IBM DB2
 CVE-2008-4692 (The Native Managed Provider for .NET component in IBM DB2 8 before ...)
-	TODO: check
+	NOT-FOR-US: IBM DB2
 CVE-2008-4691 (Unspecified vulnerability in the SQLNLS_UNPADDEDCHARLEN function in ...)
-	TODO: check
+	NOT-FOR-US: IBM DB2
 CVE-2008-4690 (lynx 2.8.6dev.15 and earlier, when advanced mode is enabled and lynx ...)
 	TODO: check
 CVE-2008-4689 (Mantis before 1.1.3 does not unset the session cookie during logout, ...)
@@ -122,9 +122,9 @@
 CVE-2008-4680 (packet-usb.c in the USB dissector in Wireshark 0.99.7 through 1.0.3 ...)
 	TODO: check
 CVE-2008-4679 (The Web Services Security component in IBM WebSphere Application ...)
-	TODO: check
+	NOT-FOR-US: IBM Websphere
 CVE-2008-4678 (The HTTP_Request_Parser method in the HTTP Transport component in IBM ...)
-	TODO: check
+	NOT-FOR-US: IBM Websphere
 CVE-2008-4677 (autoload/netrw.vim (aka the Netrw Plugin) 109, 131, and other versions ...)
 	TODO: check
 CVE-2008-XXXX [local file inclusion in drupal]




More information about the Secure-testing-commits mailing list