[Secure-testing-commits] r14409 - data/CVE

[Nico Golde]

Author: nion
Date: 2010-04-05 18:49:36 +0000 (Mon, 05 Apr 2010)
New Revision: 14409

Modified:
   data/CVE/list
Log:
- new asterisk issue (CVE-2010-1224)
- NFUs


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-04-05 16:04:30 UTC (rev 14408)
+++ data/CVE/list	2010-04-05 18:49:36 UTC (rev 14409)
@@ -53,7 +53,8 @@
 CVE-2010-1225 (The memory-management implementation in the Virtual Machine Monitor ...)
 	NOT-FOR-US: Microsoft Virtual PC
 CVE-2010-1224 (main/acl.c in Asterisk Open Source 1.6.0.x before 1.6.0.25, 1.6.1.x ...)
-	TODO: check
+	- asterisk <unfixed> (low; bug #576560)
+	[lenny] - asterisk <not-affected> (Vulnerable code not present)
 CVE-2010-1223
 	RESERVED
 CVE-2010-1222
@@ -249,13 +250,13 @@
 CVE-2009-4753 (Multiple buffer overflows in the FTP server on the Addonics NAS ...)
 	NOT-FOR-US: Addonics NAS Adapter NASU2FW41
 CVE-2010-1136 (The Standard Remember method in TikiWiki CMS/Groupware 3.x before 3.5 ...)
-	TODO: check
+	NOT-FOR-US: TikiWiki
 CVE-2010-1135 (The user_logout function in TikiWiki CMS/Groupware 4.x before 4.2 does ...)
-	TODO: check
+	NOT-FOR-US: TikiWiki
 CVE-2010-1134 (SQL injection vulnerability in the _find function in searchlib.php in ...)
-	TODO: check
+	NOT-FOR-US: TikiWiki
 CVE-2010-1133 (Multiple SQL injection vulnerabilities in TikiWiki CMS/Groupware 4.x ...)
-	TODO: check
+	NOT-FOR-US: TikiWiki
 CVE-2010-1131 (JavaScriptCore.dll, as used in Apple Safari 4.0.5 on Windows XP SP3, ...)
 	- webkit <undetermined> (unimportant)
 	- kdelibs <undetermined> (unimportant)