[Secure-testing-commits] r9734 - data/CVE

[white at alioth.debian.org]

Author: white
Date: 2008-09-03 10:06:30 +0000 (Wed, 03 Sep 2008)
New Revision: 9734

Modified:
   data/CVE/list
Log:
NFU: AN Guestbook; zoneminder issues reported to BTS

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-09-03 09:51:18 UTC (rev 9733)
+++ data/CVE/list	2008-09-03 10:06:30 UTC (rev 9734)
@@ -11,11 +11,11 @@
 CVE-2008-3883 (configvar in Caudium 1.4.12 allows local users to overwrite arbitrary ...)
 	- caudium <unfixed> (low; bug #496404)
 CVE-2008-3882 (ZoneMinder 1.23.3 and earlier allows remote attackers to execute ...)
-	TODO: check
+	- zoneminder <unfixed> (bug #497640)
 CVE-2008-3881 (Multiple cross-site scripting (XSS) vulnerabilities in ZoneMinder ...)
-	TODO: check
+	- zoneminder <unfixed> (low; bug #497640)
 CVE-2008-3880 (SQL injection vulnerability in zm_html_view_event.php in ZoneMinder ...)
-	TODO: check
+	- zoneminder <unfixed> (bug #497640)
 CVE-2008-3879 (The Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 ...)
 	NOT-FOR-US: ActiveX control in OfficeCtrl.ocx
 CVE-2008-3878 (Stack-based buffer overflow in the Ultra.OfficeControl ActiveX control ...)
@@ -81,7 +81,7 @@
 CVE-2008-3848 (SQL injection vulnerability in single.php in Z-Breaknews 2.0 allows ...)
 	NOT-FOR-US: Z-Breaknews
 CVE-2008-3847 (Multiple cross-site scripting (XSS) vulnerabilities in AN Guestbook ...)
-	TODO: check
+	NOT-FOR-US: AN Guestbook
 CVE-2008-3846 (Cross-site scripting (XSS) vulnerability in mysql-lists 1.2 and ...)
 	NOT-FOR-US: mysql-lists
 CVE-2008-3845 (Multiple SQL injection vulnerabilities in Crafty Syntax Live Help ...)