[Secure-testing-commits] r12899 - data/CVE

[Thomas Bläsing]

Author: thomasbl-guest
Date: 2009-09-29 09:52:15 +0000 (Tue, 29 Sep 2009)
New Revision: 12899

Modified:
   data/CVE/list
Log:
NFUs

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-09-28 21:14:17 UTC (rev 12898)
+++ data/CVE/list	2009-09-29 09:52:15 UTC (rev 12899)
@@ -1,33 +1,33 @@
 CVE-2009-3431 (Stack consumption vulnerability in Adobe Acrobat 9.1.1 allows remote ...)
 	TODO: check
 CVE-2009-3430 (SQL injection vulnerability in login.php in Allomani Mobile 2.5 allows ...)
-	TODO: check
+	NOT-FOR-US: Allomani Mobile
 CVE-2009-3429 (Stack-based buffer overflow in Pirate Radio Destiny Media Player 1.61 ...)
-	TODO: check
+	NOT-FOR-US: Pirate Radio Destiny Media Player
 CVE-2009-3428 (Stack-based buffer overflow in Easy Music Player 1.0.0.2 allows remote ...)
-	TODO: check
+	NOT-FOR-US: Easy Music Player
 CVE-2009-3427 (Cross-site scripting (XSS) vulnerability in Kayako SupportSuite ...)
-	TODO: check
+	NOT-FOR-US: Kayako SupportSuite
 CVE-2009-3426 (PHP remote file inclusion vulnerability in ...)
-	TODO: check
+	NOT-FOR-US: MaxCMS
 CVE-2009-3425 (Directory traversal vulnerability in ...)
-	TODO: check
+	NOT-FOR-US: MaxCMS
 CVE-2009-3424 (Multiple PHP remote file inclusion vulnerabilities in MaxCMS 3.11.20b, ...)
-	TODO: check
+	NOT-FOR-US: MaxCMS
 CVE-2009-3423 (login.php in Zenas PaoLink 1.0, when register_globals is enabled, ...)
-	TODO: check
+	NOT-FOR-US: Zenas PaoLink
 CVE-2009-3422 (login.php in Zenas PaoLiber 1.1, when register_globals is enabled, ...)
-	TODO: check
+	NOT-FOR-US: Zenas PaoLiber
 CVE-2009-3421 (login.php in Zenas PaoBacheca Guestbook 2.1, when register_globals is ...)
-	TODO: check
+	NOT-FOR-US: Zenas PaoBacheca Guestbook
 CVE-2009-3420 (Multiple cross-site scripting (XSS) vulnerabilities in index.php in ...)
-	TODO: check
+	NOT-FOR-US: Miniweb Publisher module
 CVE-2009-3419 (SQL injection vulnerability in index.php in the Publisher module 2.0 ...)
-	TODO: check
+	NOT-FOR-US: Miniweb Publisher module
 CVE-2009-3418 (Multiple SQL injection vulnerabilities in Plume CMS 1.2.3 allow (1) ...)
-	TODO: check
+	NOT-FOR-US: Plume CMS
 CVE-2009-3417 (SQL injection vulnerability in the IDoBlog (com_idoblog) component 1.1 ...)
-	TODO: check
+	NOT-FOR-US: IDoBlog component Joomla
 CVE-2009-3416
 	RESERVED
 CVE-2009-3415
@@ -174,7 +174,7 @@
 CVE-2009-3350 (Multiple unspecified vulnerabilities in the Subdomain Manager module ...)
 	NOT-FOR-US: Subdomain Manager module for Drupal
 CVE-2009-3349 (SQL injection vulnerability in Datavore Gyro 5.0 allows remote ...)
-	TODO: check
+	NOT-FOR-US: Datavore Gyro
 CVE-2009-3348 (Cross-site scripting (XSS) vulnerability in Datavore Gyro 5.0 allows ...)
 	NOT-FOR-US: Datavore Gyro
 CVE-2009-3347 (Buffer overflow on the D-Link DIR-400 wireless router allows remote ...)
@@ -1974,7 +1974,7 @@
 CVE-2009-2794 (The Exchange Support component in Apple iPhone OS before 3.1, and ...)
 	NOT-FOR-US: Apple iPhone OS 
 CVE-2009-2793 (The kernel in NetBSD, probably 5.0.1 and earlier, on x86 platforms ...)
-	TODO: check
+	NOT-FOR-US: NetBSD kernel
 CVE-2009-2792 (Directory traversal vulnerability in plugings/pagecontent.php in ...)
 	NOT-FOR-US: Really Simple CMS
 CVE-2009-2791 (PHP remote file inclusion vulnerability in pda_projects.php in ...)
@@ -4111,7 +4111,7 @@
 CVE-2008-6833 (Directory traversal vulnerability in commsrss.php in fuzzylime (cms) ...)
 	NOT-FOR-US: fuzzylime
 CVE-2009-2140 (Multiple heap-based buffer overflows in ...)
-	TODO: check
+	NOT-FOR-US: Go-oo
 CVE-2009-2139 (Heap-based buffer overflow in svtools/source/filter.vcl/wmf/enhwmf.cxx ...)
 	{DSA-1880-1}
 	- openoffice.org 1:3.1.1~ooo310m15-1