[Secure-testing-commits] r12905 - data/CVE

[Nico Golde]

Author: nion
Date: 2009-09-30 16:41:49 +0000 (Wed, 30 Sep 2009)
New Revision: 12905

Modified:
   data/CVE/list
Log:
- NFUs
- new kernel issue (CVE-2009-3280)


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-09-30 07:18:37 UTC (rev 12904)
+++ data/CVE/list	2009-09-30 16:41:49 UTC (rev 12905)
@@ -2,35 +2,35 @@
 	- xen-tools <unfixed> (low; bug #548909)
 	TODO: request CVE id
 CVE-2009-3446 (SQL injection vulnerability in the MyRemote Video Gallery (com_mytube) ...)
-	TODO: check
+	NOT-FOR-US: com_mytube component for Joomla!
 CVE-2009-3445 (Unspecified vulnerability in Code-Crafters Ability Mail Server before ...)
-	TODO: check
+	NOT-FOR-US: Ability Mail Server
 CVE-2009-3444 (Cross-site scripting (XSS) vulnerability in email.php in e107 0.7.16 ...)
-	TODO: check
+	NOT-FOR-US: e107
 CVE-2009-3443 (SQL injection vulnerability in the Fastball (com_fastball) component ...)
-	TODO: check
+	NOT-FOR-US: com_fastball component for Joomla!
 CVE-2009-3442 (The Meta tags (aka Nodewords) module before 6.x-1.1 for Drupal does ...)
-	TODO: check
+	NOT-FOR-US: Nodewords module for Drupal
 CVE-2009-3441 (Open Source Security Information Management (OSSIM) before 2.1.2 ...)
-	TODO: check
+	NOT-FOR-US: Open Source Security Information Management
 CVE-2009-3440 (Cross-site scripting (XSS) vulnerability in Open Source Security ...)
-	TODO: check
+	NOT-FOR-US: Open Source Security Information Management
 CVE-2009-3439 (Multiple SQL injection vulnerabilities in Open Source Security ...)
-	TODO: check
+	NOT-FOR-US: Open Source Security Information Management
 CVE-2009-3438 (SQL injection vulnerability in the JoomlaFacebook (com_facebook) ...)
-	TODO: check
+	NOT-FOR-US: com_facebook component for Joomla!
 CVE-2009-3437 (Cross-site scripting (XSS) vulnerability in the live preview feature ...)
-	TODO: check
+	NOT-FOR-US: Markdown Preview module for Drupal
 CVE-2009-3436 (Multiple SQL injection vulnerabilities in forum.asp in MaxWebPortal ...)
-	TODO: check
+	NOT-FOR-US: MaxWebPortal
 CVE-2009-3435 (Cross-site scripting (XSS) vulnerability in the variable editor in the ...)
-	TODO: check
+	NOT-FOR-US: Devel module for Drupal
 CVE-2009-3434 (SQL injection vulnerability in the Tupinambis (com_tupinambis) ...)
-	TODO: check
+	NOT-FOR-US: com_tupinambis for Mambo and Joomla!
 CVE-2009-3433 (Unspecified vulnerability in clsetup in the configuration utility in ...)
-	TODO: check
+	NOT-FOR-US: Sun Solaris Cluster
 CVE-2009-3432 (Unspecified vulnerability in xscreensaver in Sun Solaris 10, and ...)
-	TODO: check
+	NOT-FOR-US: Sun OpenSolaris xscreensaver
 CVE-2009-3431 (Stack consumption vulnerability in Adobe Acrobat 9.1.1 allows remote ...)
 	NOT-FOR-US: Adobe Acrobat
 CVE-2009-3430 (SQL injection vulnerability in login.php in Allomani Mobile 2.5 allows ...)
@@ -345,7 +345,8 @@
 CVE-2009-3281
 	RESERVED
 CVE-2009-3280 (Integer signedness error in the find_ie function in ...)
-	TODO: check
+	- linux-2.6 <unfixed> (medium)
+	- linux-2.6.24 <removed>
 CVE-2009-3279 (The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 ...)
 	NOT-FOR-US: QNAP TS-239 Pro and TS-639
 CVE-2009-3278 (The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 ...)