[Secure-testing-commits] r12093 - data/CVE

[Steffen Joeris]

Author: white
Date: 2009-06-10 04:31:58 +0000 (Wed, 10 Jun 2009)
New Revision: 12093

Modified:
   data/CVE/list
Log:
NFUs

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-06-09 21:14:17 UTC (rev 12092)
+++ data/CVE/list	2009-06-10 04:31:58 UTC (rev 12093)
@@ -1,21 +1,21 @@
 CVE-2009-2011
 	RESERVED
 CVE-2009-2010 (Multiple SQL injection vulnerabilities in Haudenschilt Family ...)
-	TODO: check
+	NOT-FOR-US: Haudenschilt Family Connections CMS
 CVE-2009-2009 (Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.5, ...)
-	TODO: check
+	NOT-FOR-US: Dokeos
 CVE-2009-2008 (Multiple SQL injection vulnerabilities in Dokeos 1.8.5, and possibly ...)
-	TODO: check
+	NOT-FOR-US: Dokeos
 CVE-2009-2007 (Multiple directory traversal vulnerabilities in Dokeos 1.8.5, and ...)
-	TODO: check
+	NOT-FOR-US: Dokeos
 CVE-2009-2006 (Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.5, ...)
-	TODO: check
+	NOT-FOR-US: Dokeos
 CVE-2009-2005 (Cross-site request forgery (CSRF) vulnerability in Dokeos 1.8.5, and ...)
-	TODO: check
+	NOT-FOR-US: Dokeos
 CVE-2009-2004 (Multiple SQL injection vulnerabilities in main/mySpace/myStudents.php ...)
-	TODO: check
+	NOT-FOR-US: Dokeos
 CVE-2009-2003 (Ascad Networks Password Protector SD 1.3.1 allows remote attackers to ...)
-	TODO: check
+	NOT-FOR-US: Ascad Networks Password Protector
 CVE-2009-2002
 	RESERVED
 CVE-2009-2001
@@ -97,19 +97,19 @@
 CVE-2009-1963
 	RESERVED
 CVE-2008-6832 (Cross-site request forgery (CSRF) vulnerability in Atlassian JIRA ...)
-	TODO: check
+	NOT-FOR-US: Atlassian JIRA Enterprise Edition
 CVE-2008-6831 (Multiple cross-site scripting (XSS) vulnerabilities in Atlassian JIRA ...)
-	TODO: check
+	NOT-FOR-US: Atlassian JIRA Enterprise Edition
 CVE-2008-6830 (The disconnection feature in Citrix Web Interface 5.0 and 5.0.1 for ...)
 	TODO: check
 CVE-2008-6829 (VicFTPS 5.0 allows remote attackers to cause a denial of service ...)
-	TODO: check
+	NOT-FOR-US: VicFTPS
 CVE-2008-6828 (Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 stores the ...)
-	TODO: check
+	NOT-FOR-US: Symantec Altiris Deployment Solution
 CVE-2008-6827 (The ListView control in the Client GUI (AClient.exe) in Symantec ...)
-	TODO: check
+	NOT-FOR-US: Symantec Altiris Deployment Solution
 CVE-2008-6826 (dhtml.pl in MHF Media Pro allows remote attackers to execute arbitrary ...)
-	TODO: check
+	NOT-FOR-US: MHF Media Pro
 CVE-2009-XXXX [predictable random number generator used in web browsers]
 	- webkit <unfixed> (low; bug #532514)
 	- xulrunner <unfixed> (low; bug #532516)