[Secure-testing-commits] r11888 - data/CVE

[Nico Golde]

Author: nion
Date: 2009-05-13 11:09:23 +0000 (Wed, 13 May 2009)
New Revision: 11888

Modified:
   data/CVE/list
Log:
- NFU
- new cscope issue (CVE-2009-0148)


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-05-13 10:56:11 UTC (rev 11887)
+++ data/CVE/list	2009-05-13 11:09:23 UTC (rev 11888)
@@ -47,11 +47,11 @@
 CVE-2009-1595 (The jabber:iq:auth implementation in IQAuthHandler.java in Ignite ...)
 	NOT-FOR-US: Openfire
 CVE-2008-6805 (Multiple SQL injection vulnerabilities in Mic_Blog 0.0.3, when ...)
-	TODO: check
+	NOT-FOR-US: Mic_Blog
 CVE-2008-6804 (** DISPUTED ** Tribiq CMS 5.0.9a beta allows remote attackers to ...)
 	NOT-FOR-US: Tribiq CMS Community
 CVE-2008-6803 (SQL injection vulnerability in diziler.asp in Yigit Aybuga Dizi ...)
-	TODO: check
+	NOT-FOR-US: Yigit Aybuga Dizi Portali
 CVE-2009-XXXX [More file buffer overflows]
 	- file 5.03-1
 	TODO: Check, whether code was introduced in 5.x as well like the other issues
@@ -5349,7 +5349,7 @@
 CVE-2009-0195 (Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, ...)
 	TODO: check
 CVE-2009-0194 (The domain-locking implementation in the ...)
-	TODO: check
+	NOT-FOR-US: Garmin Communicator Plug-In
 CVE-2009-0193 (Heap-based buffer overflow in Adobe Acrobat Reader 9 before 9.1, 8 ...)
 	NOT-FOR-US: Adobe Acrobat Reader
 CVE-2009-0192
@@ -5481,7 +5481,7 @@
 CVE-2009-0149
 	RESERVED
 CVE-2009-0148 (Multiple buffer overflows in Cscope before 15.7a allow remote ...)
-	TODO: check
+	- cscope <unfixed> (low; bug #528510)
 CVE-2009-0147 (Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and ...)
 	{DSA-1793-1 DSA-1790-1}
 	- poppler <unfixed> (medium; bug #524806)