[Secure-testing-commits] r11513 - data/CVE

[jmm-guest at alioth.debian.org]

Author: jmm-guest
Date: 2009-03-31 22:11:00 +0000 (Tue, 31 Mar 2009)
New Revision: 11513

Modified:
   data/CVE/list
Log:
- poked maintainer for puppetmaster
- NFUs
- new cman issue


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-03-31 21:59:42 UTC (rev 11512)
+++ data/CVE/list	2009-03-31 22:11:00 UTC (rev 11513)
@@ -142,25 +142,26 @@
         NOTE: This seems like a non-issue, since the config file should be under control
         NOTE: of the admin?
 CVE-2008-6559 (Merge mcd in ReliantHA 1.1.4 in SCO UnixWare 7.1.4 allows local users ...)
-	TODO: check
+	NOT-FOR-US: SCO UnixWare
 CVE-2008-6558 (Untrusted search path vulnerability in (1) hvdisp and (2) rcvm in ...)
-	TODO: check
+	NOT-FOR-US: SCO UnixWare
 CVE-2008-6557 (cgi-bin/webutil.pl in The Puppet Master WebUtil 2.7 allows remote ...)
-	TODO: check
+	TODO: check, whether it's related to puppetmaster from puppet
 CVE-2008-6556 (cgi-bin/webutil.pl in The Puppet Master WebUtil 2.3 allows remote ...)
-	TODO: check
+	TODO: check, whether it's related to puppetmaster from puppet
 CVE-2008-6555 (cgi-bin/webutil.pl in The Puppet Master WebUtil allows remote ...)
-	TODO: check
+	TODO: check, whether it's related to puppetmaster from puppet
 CVE-2008-6554 (cgi-bin/script in Aztech ADSL2/2+ 4-port router 3.7.0 build 070426 ...)
-	TODO: check
+	NOT-FOR-US: Aztech router
 CVE-2008-6553 (microcms-admin-home.php in Implied by Design Micro CMS (Micro-CMS) 3.5 ...)
-	TODO: check
+	NOT-FOR-US: Micro CMS
 CVE-2008-6552 (Red Hat Cluster Project 2.x allows local users to modify or overwrite ...)
-	TODO: check
+	- redhat-cluster <unfixed>
+	TODO: File bug
 CVE-2008-6551 (Multiple directory traversal vulnerabilities in e-Vision CMS 2.0.2 and ...)
-	TODO: check
+	NOT-FOR-US: e-vision CMS
 CVE-2008-6550 (Cross-site scripting (XSS) vulnerability in glossaire.php in Glossaire ...)
-	TODO: check
+	NOT-FOR-US: Glossaire
 CVE-2008-6549 (The password_checker function in config/multiconfig.py in MoinMoin ...)
 	TODO: check
 CVE-2008-6548 (The rst parser (parser/text_rst.py) in MoinMoin 1.6.1 does not check ...)