[Secure-testing-commits] r11422 - data/CVE

[white at alioth.debian.org]

Author: white
Date: 2009-03-17 12:53:46 +0000 (Tue, 17 Mar 2009)
New Revision: 11422

Modified:
   data/CVE/list
Log:
NFUs

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-03-17 09:14:09 UTC (rev 11421)
+++ data/CVE/list	2009-03-17 12:53:46 UTC (rev 11422)
@@ -50,21 +50,21 @@
 CVE-2009-0887 (Integer signedness error in the _pam_StrTok function in ...)
 	TODO: check
 CVE-2009-0886 (Directory traversal vulnerability in login.php in OneOrZero Helpdesk ...)
-	TODO: check
+	NOT-FOR-US: OneOrZero Helpdesk
 CVE-2009-0885 (Multiple heap-based buffer overflows in Media Commands 1.0 allow ...)
-	TODO: check
+	NOT-FOR-US: Media Commands
 CVE-2009-0884 (Buffer overflow in FileZilla Server before 0.9.31 allows remote ...)
-	TODO: check
+	NOT-FOR-US: FileZilla Server (only client packaged in debian)
 CVE-2009-0883 (SQL injection vulnerability in Blue Eye CMS 1.0.0 and earlier, when ...)
-	TODO: check
+	NOT-FOR-US: Blue Eye CMS
 CVE-2009-0882 (Multiple SQL injection vulnerabilities in nForum 1.5 allow remote ...)
-	TODO: check
+	NOT-FOR-US: nForum
 CVE-2009-0881 (SQL injection vulnerability in ejemplo/paises.php in isiAJAX 1 allows ...)
-	TODO: check
+	NOT-FOR-US: isiAJAX
 CVE-2009-0880 (Directory traversal vulnerability in the CIM server in IBM Director ...)
-	TODO: check
+	NOT-FOR-US: Windows
 CVE-2009-0879 (The CIM server in IBM Director before 5.20.3 Service Update 2 on ...)
-	TODO: check
+	NOT-FOR-US: Windows
 CVE-2009-0878 (The read_game_map function in src/terrain_translation.cpp in Wesnoth ...)
 	TODO: check
 CVE-2009-0877 (Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System ...)
@@ -72,27 +72,27 @@
 CVE-2009-0876 (Unspecified vulnerability in Sun xVM VirtualBox 2.0.0, 2.0.2, 2.0.4, ...)
 	TODO: check
 CVE-2009-0875 (Race condition in the Doors subsystem in the kernel in Sun Solaris 8 ...)
-	TODO: check
+	NOT-FOR-US: Sun Solaris
 CVE-2009-0874 (Multiple unspecified vulnerabilities in the Doors subsystem in the ...)
-	TODO: check
+	NOT-FOR-US: Sun Solaris
 CVE-2008-6472 (The WLCCP dissector in Wireshark 0.99.7 through 1.0.4 allows remote ...)
 	TODO: check
 CVE-2008-6471 (SQL injection vulnerability in detail.php in MountainGrafix easyLink ...)
-	TODO: check
+	NOT-FOR-US: MountainGrafix easyLink
 CVE-2008-6470 (Multiple unspecified vulnerabilities in ClanSphere before 2008.2.1 ...)
-	TODO: check
+	NOT-FOR-US: ClanSphere
 CVE-2008-6469 (SQL injection vulnerability in index.php in PlainCart 1.1.2 allows ...)
-	TODO: check
+	NOT-FOR-US: PlainCart
 CVE-2008-6468 (SQL injection vulnerability in index.php in Diesel Pay allows remote ...)
-	TODO: check
+	NOT-FOR-US: Diesel Pay
 CVE-2008-6467 (SQL injection vulnerability in jobs/jobseekers/job-info.php in Diesel ...)
-	TODO: check
+	NOT-FOR-US: Diesel Pay
 CVE-2008-6466 (SQL injection vulnerability in image_gallery.php in the Akira Powered ...)
-	TODO: check
+	NOT-FOR-US: e107
 CVE-2008-6465 (Multiple cross-site scripting (XSS) vulnerabilities in login.php in ...)
-	TODO: check
+	NOT-FOR-US: Parallels H-Sphere
 CVE-2008-6464 (SQL injection vulnerability in event.php in Mevin Productions Basic ...)
-	TODO: check
+	NOT-FOR-US: Mevin Productions Basic PHP Events Lister
 CVE-2008-6463 (SQL injection vulnerability in the Diocese of Portsmouth Church Search ...)
 	TODO: check
 CVE-2008-6462 (SQL injection vulnerability in the My quiz and poll (myquizpoll) ...)
@@ -110,15 +110,15 @@
 CVE-2008-6456 (SQL injection vulnerability in the HBook (h_book) extension 2.3.0 and ...)
 	TODO: check
 CVE-2008-6455 (Session fixation vulnerability in Edikon phpShop 0.8.1 allows remote ...)
-	TODO: check
+	NOT-FOR-US: Edikon phpShop
 CVE-2008-6454 (SQL injection vulnerability in section.php in 6rbScript 3.3 allows ...)
-	TODO: check
+	NOT-FOR-US: 6rbScript
 CVE-2008-6453 (Directory traversal vulnerability in section.php in 6rbScript 3.3, ...)
-	TODO: check
+	NOT-FOR-US: 6rbScript
 CVE-2008-6452 (SQL injection vulnerability in show_vote.php in Oceandir 2.9 and ...)
-	TODO: check
+	NOT-FOR-US: Oceandir
 CVE-2008-6451 (SQL injection vulnerability in humor.php in jPORTAL 2 allows remote ...)
-	TODO: check
+	NOT-FOR-US: jPORTAL
 CVE-2009-0873 (The NFS daemon (aka nfsd) in Sun Solaris 10 and OpenSolaris before ...)
 	NOT-FOR-US: Solaris
 CVE-2009-0872 (The NFS server in Sun Solaris 10, and OpenSolaris before snv_111, does ...)