[Secure-testing-commits] r11829 - data/CVE

[Giuseppe Iuculano]

Author: derevko-guest
Date: 2009-05-07 10:28:47 +0000 (Thu, 07 May 2009)
New Revision: 11829

Modified:
   data/CVE/list
Log:
NFUs
CVE-2009-1490: sendmail vulnerable versions too old


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-05-07 09:14:15 UTC (rev 11828)
+++ data/CVE/list	2009-05-07 10:28:47 UTC (rev 11829)
@@ -188,9 +188,9 @@
 CVE-2009-1492 (The getAnnots Doc method in the JavaScript API in Adobe Reader and ...)
 	NOT-FOR-US: Adobe Reader
 CVE-2009-1491 (McAfee GroupShield for Microsoft Exchange on Exchange Server 2000, and ...)
-	TODO: check
+	NOT-FOR-US: McAfee GroupShield for Microsoft Exchange
 CVE-2009-1490 (Heap-based buffer overflow in Sendmail before 8.13.2 allows remote ...)
-	TODO: check
+	- sendmail <not-affected> (Vulnerable versions too old)
 CVE-2009-XXXX [samba: Account locking out doesnt work with an LDAP backend]
 	- samba 2:3.2.6 (bug #514151)
 	[lenny] - samba 2:3.2.5-4lenny1
@@ -258,11 +258,11 @@
 CVE-2009-1470
 	RESERVED
 CVE-2009-1469 (CRLF injection vulnerability in the Forgot Password implementation in ...)
-	TODO: check
+	NOT-FOR-US: IceWarp
 CVE-2009-1468 (Multiple SQL injection vulnerabilities in the search form in ...)
-	TODO: check
+	NOT-FOR-US: IceWarp
 CVE-2009-1467 (Multiple cross-site scripting (XSS) vulnerabilities in IceWarp eMail ...)
-	TODO: check
+	NOT-FOR-US: IceWarp
 CVE-2009-1466
 	RESERVED
 CVE-2009-1465