[Secure-testing-commits] r12013 - data/CVE

[James Strandboge]

Author: jamie-guest
Date: 2009-06-01 21:09:51 +0000 (Mon, 01 Jun 2009)
New Revision: 12013

Modified:
   data/CVE/list
Log:
NFUs

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-06-01 16:38:29 UTC (rev 12012)
+++ data/CVE/list	2009-06-01 21:09:51 UTC (rev 12013)
@@ -1,3 +1,43 @@
+CVE-2009-1831
+	NOT-FOR-US: Nullsoft Winamp
+CVE-2009-1830
+	NOT-FOR-US: Soulseek
+CVE-2009-1826
+	NOT-FOR-US: myGesuad
+CVE-2009-1825
+	NOT-FOR-US: myColex
+CVE-2009-1824
+	NOT-FOR-US: ArcaBit ArcaVir
+CVE-2009-1823
+	NOT-FOR-US: 3rd party Printer, e-mail and PDF module for Drupal
+CVE-2009-1822
+	NOT-FOR-US: Joomla!
+CVE-2009-1821
+	NOT-FOR-US: DMXReady Registration Manager
+CVE-2009-1820
+	NOT-FOR-US: 2daybiz Custom T-shirt Design Script
+CVE-2009-1819
+	NOT-FOR-US: 2daybiz Custom T-shirt Design Script
+CVE-2009-1818
+	NOT-FOR-US: MaxCMS
+CVE-2009-1817
+	NOT-FOR-US: DigiMode Maya
+CVE-2009-1816
+	NOT-FOR-US: My Game Script
+CVE-2009-1815
+	NOT-FOR-US: Sonic Spot Audioactive Player
+CVE-2009-1814
+	NOT-FOR-US: PHPenpals
+CVE-2009-1813
+	NOT-FOR-US: Submitter Script
+CVE-2009-1812
+	NOT-FOR-US: myGesuad
+CVE-2009-1811
+	NOT-FOR-US: myGesuad
+CVE-2009-1810
+	NOT-FOR-US: myColex
+CVE-2009-1809
+	NOT-FOR-US: myColex
 CVE-2009-1829 [wireshark PCNFSD DoS]
 	- wireshark <unfixed> (low)
 CVE-2009-1808 (Microsoft Windows XP SP3 allows local users to cause a denial of ...)
@@ -45,7 +85,7 @@
 CVE-2009-1793
 	RESERVED
 CVE-2009-1792
-	RESERVED
+	NOT-FOR-US: StoneTrip Ston3D StandalonePlayer
 CVE-2009-1790 (Cross-site scripting (XSS) vulnerability in CGI RESCUE Trees before ...)
 	NOT-FOR-US: CGI Rescue Trees
 CVE-2009-1787 (Multiple SQL injection vulnerabilities in PHP Dir Submit (aka ...)
@@ -670,7 +710,7 @@
 CVE-2009-1538
 	RESERVED
 CVE-2009-1537
-	RESERVED
+	NOT-FOR-US: Microsoft DirectX
 CVE-2009-1536
 	RESERVED
 CVE-2009-1535
@@ -4418,7 +4458,7 @@
 CVE-2009-0589
 	REJECTED
 CVE-2009-0588 (agent/request/op.cgi in the Registration Authority (RA) component in ...)
-	TODO: check
+	NOT-FOR-US: Registration Authority (RA) component in Red Hat Certificate System (RHCS)
 CVE-2009-0587 (Multiple integer overflows in Evolution Data Server (aka ...)
 	- evolution-data-server 2.22.3-1 (medium)
 	NOTE: this version doesnt fix the overflows but uses the glib functions for decoding instead
@@ -11288,9 +11328,9 @@
 CVE-2008-3871 (Multiple format string vulnerabilities in UltraISO 9.3.1.2633, and ...)
 	NOT-FOR-US: UltraISO
 CVE-2008-3870 (Integer overflow in sadmind in Sun Solaris 8 and 9 allows remote ...)
-	TODO: check
+	NOT-FOR-US: Sun Solaris
 CVE-2008-3869 (Heap-based buffer overflow in sadmind in Sun Solaris 8 and 9 allows ...)
-	TODO: check
+	NOT-FOR-US: Sun Solaris
 CVE-2008-3868 (Cross-site request forgery (CSRF) vulnerability in Interact 2.4.1 ...)
 	NOT-FOR-US: Interact
 CVE-2008-3867 (SQL injection vulnerability in spaces/emailuser.php in Interact 2.4.1 ...)