[Secure-testing-commits] r12039 - data/CVE

[Nico Golde]

Author: nion
Date: 2009-06-03 20:34:15 +0000 (Wed, 03 Jun 2009)
New Revision: 12039

Modified:
   data/CVE/list
Log:
- NFUs
- cveified drupal


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-06-03 18:00:32 UTC (rev 12038)
+++ data/CVE/list	2009-06-03 20:34:15 UTC (rev 12039)
@@ -59,9 +59,9 @@
 CVE-2009-1852 (Multiple SQL injection vulnerabilities in Graphiks MyForum 1.3 allow ...)
 	NOT-FOR-US: Graphiks MyForum
 CVE-2009-1851 (SQL injection vulnerability in include.php in phpBugTracker 1.0.4 and ...)
-	TODO: check
+	NOT-FOR-US: phpBugTracker
 CVE-2009-1850 (SQL injection vulnerability in index.php in phpBugTracker 1.0.3 allows ...)
-	TODO: check
+	NOT-FOR-US: phpBugTracker
 CVE-2009-1849 (Cross-site scripting (XSS) vulnerability in the Monitor_Bandwidth ...)
 	NOT-FOR-US: PRTG Traffic Grapher
 CVE-2009-1848 (SQL injection vulnerability in the JoomlaMe AgoraGroups (aka AG or ...)
@@ -73,7 +73,8 @@
 CVE-2009-1845 (Cross-site scripting (XSS) vulnerability in ajax/updatecheck.php in ...)
 	NOT-FOR-US: Lussumo Vanilla
 CVE-2009-1844 (Multiple cross-site scripting (XSS) vulnerabilities in Drupal 5.x ...)
-	TODO: check
+	- drupal5 5.17-1.1 (low; bug #529191)
+	- drupal6 6.11-1.1 (low; bug #529190; bug #531386)
 CVE-2009-1843 (Multiple SQL injection vulnerabilities in Flash Quiz Beta 2 allow ...)
 	NOT-FOR-US: Flash Quiz
 CVE-2009-1842 (SQL injection vulnerability in main/tracking/userLog.php in Francisco ...)
@@ -172,7 +173,7 @@
 CVE-2009-1806 (Unspecified vulnerability in IBM Hardware Management Console (HMC) 7 ...)
 	NOT-FOR-US: IBM Hardware Management Console
 CVE-2009-1805 (Unspecified vulnerability in the VMware Descheduled Time Accounting ...)
-	TODO: check
+	NOT-FOR-US: VMware (experimental feature anyway)
 CVE-2009-1804 (Multiple SQL injection vulnerabilities in admin/index.php in ...)
 	NOT-FOR-US: videoscript
 CVE-2009-1803 (FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x versions, ...)
@@ -544,11 +545,6 @@
 	- libsndfile 1.0.20-1 (medium; bug #528650)
 CVE-2009-1791 (Heap-based buffer overflow in aiff_read_header in libsndfile 1.0.15 ...)
 	- libsndfile 1.0.20-1 (medium; bug #528650)
-CVE-2009-XXXX [drupal: cross-site scripting vulnerability]
-	- drupal5 5.17-1.1 (low; bug #529191)
-	- drupal6 6.11-1.1 (low; bug #529190; bug #531386)
-	[lenny] - drupal6 6.6-3lenny2
-	NOTE: CVE id requested
 CVE-2009-XXXX [kdebase: potential digital certificate deficiencies in konqueror 4]
 	- kdebase <unfixed> (low; bug #526985)
 	[etch] - kdebase <not-affected> (vulnerability introduced in konqueror 4)