[Secure-testing-commits] r11098 - data/CVE

[white at alioth.debian.org]

Author: white
Date: 2009-01-29 18:58:34 +0000 (Thu, 29 Jan 2009)
New Revision: 11098

Modified:
   data/CVE/list
Log:
NFUs

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-01-29 18:46:54 UTC (rev 11097)
+++ data/CVE/list	2009-01-29 18:58:34 UTC (rev 11098)
@@ -21,7 +21,7 @@
 	- gedit <unfixed> (low; bug #513513)
 	[etch] - gedit <no-dsa> (Minor issue)
 CVE-2009-0313 (winetricks before 20081223 allows local users to overwrite arbitrary ...)
-	TODO: check
+	NOT-FOR-US: winetricks
 CVE-2009-0311 (The Backbone service (ftbackbone.exe) in EMC AutoStart before 5.3 SP2 ...)
 	NOT-FOR-US: EMC AutoStart
 CVE-2009-0310
@@ -65,27 +65,27 @@
 CVE-2009-0291 (Directory traversal vulnerability in fc.php in OpenX 2.6.3 allows ...)
 	NOT-FOR-US: OpenX
 CVE-2009-0290 (Directory traversal vulnerability in common.php in SIR GNUBoard ...)
-	TODO: check
+	NOT-FOR-US: GNUBoard
 CVE-2009-0289 (k23productions TFTPUtil GUI 1.2.0 and 1.3.0 allows remote attackers to ...)
-	TODO: check
+	NOT-FOR-US: k23productions TFTPUtil GUI
 CVE-2009-0288 (Directory traversal vulnerability in k23productions TFTPUtil GUI 1.2.0 ...)
-	TODO: check
+	NOT-FOR-US: k23productions TFTPUtil GUI
 CVE-2009-0287 (SQL injection vulnerability in lib/patUser.php in KEEP Toolkit before ...)
-	TODO: check
+	NOT-FOR-US: KEEP Toolkit
 CVE-2009-0286 (Directory traversal vulnerability in upgrade/index.php in OpenGoo 1.1, ...)
-	TODO: check
+	NOT-FOR-US: OpenGoo
 CVE-2009-0285 (Cross-site scripting (XSS) vulnerability in error.asp in BBSXP 5.13 ...)
-	TODO: check
+	NOT-FOR-US: BBSXP
 CVE-2009-0284 (SQL injection vulnerability in category.php in Flax Article Manager ...)
-	TODO: check
+	NOT-FOR-US: Flax Article Manager
 CVE-2009-0283 (Cross-site scripting (XSS) vulnerability in err.asp in Oblog allows ...)
-	TODO: check
+	NOT-FOR-US: Oblog
 CVE-2009-0281 (SQL injection vulnerability in login.aspx in WarHound Walking Club ...)
-	TODO: check
+	NOT-FOR-US: WarHound Walking Club
 CVE-2009-0280 (Asp Project Management 1.0 allows remote attackers to bypass ...)
-	TODO: check
+	NOT-FOR-US: Asp Project Management
 CVE-2009-0279 (SQL injection vulnerability in comentar.php in Pardal CMS 0.2.0 and ...)
-	TODO: check
+	NOT-FOR-US: Pardal CMS
 CVE-2008-5987 (Untrusted search path vulnerability in the Python interface in eog ...)
 	- eog 2.22.3-2 (bug #504352; low)
 	[etch] - eog <not-affected> (Vulnerable code not present)
@@ -102,7 +102,7 @@
 CVE-2008-5983 (Untrusted search path vulnerability in the PySys_SetArgv API function ...)
 	TODO: check
 CVE-2008-5982 (Format string vulnerability in BMC PATROL Agent before 3.7.30 allows ...)
-	TODO: check
+	NOT-FOR-US: BMC PATROL Agent
 CVE-2009-0323 [multiple buffer overflows in amaya]
 	TODO: report bug
 	- amaya <unfixed> (medium)