[Secure-testing-commits] r11243 - data/CVE

[jamie-guest at alioth.debian.org]

Author: jamie-guest
Date: 2009-02-19 22:33:33 +0000 (Thu, 19 Feb 2009)
New Revision: 11243

Modified:
   data/CVE/list
Log:
NFUs

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-02-19 21:14:11 UTC (rev 11242)
+++ data/CVE/list	2009-02-19 22:33:33 UTC (rev 11243)
@@ -1,9 +1,9 @@
 CVE-2009-0646 (Multiple SQL injection vulnerabilities in 4Site CMS 2.6 and earlier ...)
-	TODO: check
+	NOT-FOR-US: 4Site CMS
 CVE-2009-0645 (Directory traversal vulnerability in index.php in Jaws 0.8.8 allows ...)
-	TODO: check
+	NOT-FOR-US: Jaws
 CVE-2009-0644 (The HTTP interface in Swann DVR4-SecuraNet has a certain default ...)
-	TODO: check
+	NOT-FOR-US: Swann DVR4-SecuraNet
 CVE-2009-0643 (Static code injection vulnerability in post.php in Simple PHP News 1.0 ...)
 	TODO: check
 CVE-2009-0642 (ext/openssl/ossl_ocsp.c in Ruby 1.8 and 1.9 does not properly check ...)
@@ -13,11 +13,11 @@
 CVE-2009-0640 (Directory traversal vulnerability in the administrative web server in ...)
 	TODO: check
 CVE-2009-0639 (PHP remote file inclusion vulnerability in moduli/libri/index.php in ...)
-	TODO: check
+	NOT-FOR-US: phpyabs
 CVE-2008-6166 (SQL injection vulnerability in the KBase (com_kbase) 1.2 component for ...)
-	TODO: check
+	NOT-FOR-US: Joomla!
 CVE-2008-6165 (SQL injection vulnerability in gestion.php in CSPartner 0.1, when ...)
-	TODO: check
+	NOT-FOR-US: CSPartner
 CVE-2008-6164 (Cross-site scripting (XSS) vulnerability in index.php in DreamCost ...)
 	TODO: check
 CVE-2008-6163 (SQL injection vulnerability in www/delivery/ac.php in OpenX 2.6.1 ...)
@@ -25,11 +25,11 @@
 CVE-2008-6162 (Bux.to Clone script allows remote attackers to bypass authentication ...)
 	TODO: check
 CVE-2008-6161 (Cross-site scripting (XSS) vulnerability in WOW Raid Manager (WRM) ...)
-	TODO: check
+	NOT-FOR-US: WOW Raid Manager
 CVE-2008-6160 (Semantically-Interconnected Online Communities (SIOC) 5.x before ...)
-	TODO: check
+	NOT-FOR-US: Semantically-Interconnected Online Communities
 CVE-2008-6159 (Content Management Made Easy (CMME) 1.19 allows remote attackers to ...)
-	TODO: check
+	NOT-FOR-US: Content Management Made Easy
 CVE-2005-4878 (Multiple cross-site scripting (XSS) vulnerabilities in (1) ...)
 	TODO: check
 CVE-2009-0638
@@ -198,7 +198,7 @@
 CVE-2009-0577
 	RESERVED
 CVE-2009-0576 (Unspecified vulnerability in Sun Java System Directory Server 5.2 p6 ...)
-	TODO: check
+	NOT-FOR-US: Sun Java System Directory Server
 CVE-2009-0575 (Cross-site scripting (XSS) vulnerability in the ...)
 	NOT-FOR-US: Views Bulk Operations
 CVE-2009-0574 (SQL injection vulnerability in index.php in Easy CafeEngine allows ...)
@@ -415,7 +415,7 @@
 CVE-2009-0505
 	RESERVED
 CVE-2009-0504 (WSPolicy in the Web Services component in IBM WebSphere Application ...)
-	TODO: check
+	NOT-FOR-US: IBM WebSphere Application Server
 CVE-2009-0503 (IBM WebSphere Message Broker 6.1.x before 6.1.0.2 writes a database ...)
 	NOT-FOR-US: IBM WebSphere
 CVE-2008-6110 (Unspecified vulnerability in SemanticScuttle before 0.90 has unknown ...)
@@ -5884,7 +5884,7 @@
 CVE-2008-4286
 	RESERVED
 CVE-2008-4285 (Unspecified vulnerability in the Performance Monitoring Infrastructure ...)
-	TODO: check
+	NOT-FOR-US: IBM WebSphere Application Server
 CVE-2008-4284 (Open redirect vulnerability in the ibm_security_logout servlet in IBM ...)
 	NOT-FOR-US: IBM WebSphere Application Server
 CVE-2008-4283 (CRLF injection vulnerability in the WebContainer component in IBM ...)