[Secure-testing-commits] r14149 - data/CVE

[James Strandboge]

Author: jamie-guest
Date: 2010-02-23 22:30:18 +0000 (Tue, 23 Feb 2010)
New Revision: 14149

Modified:
   data/CVE/list
Log:
NFUs

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-02-23 21:27:47 UTC (rev 14148)
+++ data/CVE/list	2010-02-23 22:30:18 UTC (rev 14149)
@@ -47,9 +47,9 @@
 CVE-2010-0667
 	RESERVED
 CVE-2010-0666 (Unspecified vulnerability in eMBox in Novell eDirectory 8.8 SP5 Patch ...)
-	TODO: check
+	NOT-FOR-US: Novell eDirectory
 CVE-2010-0665 (JAG (Just Another Guestbook) 1.14 stores sensitive information under ...)
-	TODO: check
+	NOT-FOR-US: JAG
 CVE-2009-4651 (Multiple cross-site scripting (XSS) vulnerabilities in the Webee ...)
 	TODO: check
 CVE-2009-4650 (SQL injection vulnerability in the Webee Comments (com_webeecomment) ...)
@@ -57,15 +57,15 @@
 CVE-2009-4649 (Multiple cross-site scripting (XSS) vulnerabilities in geccBBlite 0.1 ...)
 	TODO: check
 CVE-2009-4648 (Accellion Secure File Transfer Appliance before 8_0_105 does not ...)
-	TODO: check
+	NOT-FOR-US: Accellion Secure File Transfer Appliance
 CVE-2009-4647 (Cross-site scripting (XSS) vulnerability in Accellion Secure File ...)
-	TODO: check
+	NOT-FOR-US: Accellion Secure File Transfer Appliance
 CVE-2009-4646 (Static code injection vulnerability in the administrative web ...)
-	TODO: check
+	NOT-FOR-US: Accellion Secure File Transfer Appliance
 CVE-2009-4645 (Directory traversal vulnerability in web_client_user_guide.html in ...)
-	TODO: check
+	NOT-FOR-US: Accellion Secure File Transfer Appliance
 CVE-2009-4644 (Accellion Secure File Transfer Appliance before 8_0_105 allows remote ...)
-	TODO: check
+	NOT-FOR-US: Accellion Secure File Transfer Appliance
 CVE-2005-4886
 	RESERVED
 CVE-2010-XXXX [konversation DoS]
@@ -141,17 +141,17 @@
 CVE-2010-0643 (Google Chrome before 4.0.249.89 attempts to make direct connections to ...)
 	- chromium-browser <itp> (bug #520334)
 CVE-2010-0642 (Cisco Collaboration Server (CCS) 5 allows remote attackers to read the ...)
-	TODO: check
+	NOT-FOR-US: Cisco Collaboration Server
 CVE-2010-0641 (Cross-site scripting (XSS) vulnerability in ...)
-	TODO: check
+	NOT-FOR-US: Cisco Collaboration Server
 CVE-2010-0640
 	RESERVED
 CVE-2010-0639 (The htcpHandleTstRequest function in htcp.c in Squid 2.x and 3.0 ...)
 	TODO: check
 CVE-2010-0638 (Cross-site request forgery (CSRF) vulnerability in WebCalendar 1.2.0 ...)
-	TODO: check
+	NOT-FOR-US: WebCalendar
 CVE-2009-4643 (Stack-based buffer overflow in dsInstallerService.dll in the Juniper ...)
-	TODO: check
+	NOT-FOR-US: Juniper Installer Service
 CVE-2009-XXXX [ffmpeg vulnerabilities]
 	- ffmpeg <unfixed> (medium; bug #570713; bug #550442)
 	- ffmpeg-debian <removed> (medium)
@@ -1753,11 +1753,11 @@
 CVE-2010-0109
 	RESERVED
 CVE-2010-0108 (Buffer overflow in an ActiveX control in the Symantec Client Proxy ...)
-	TODO: check
+	NOT-FOR-US: Symantec AntiVirus
 CVE-2010-0107
 	RESERVED
 CVE-2010-0106 (The on-demand scanning in Symantec AntiVirus 10.0.x and 10.1.x before ...)
-	TODO: check
+	NOT-FOR-US: Symantec AntiVirus
 CVE-2010-0105
 	RESERVED
 CVE-2010-0104
@@ -3522,7 +3522,7 @@
 CVE-2009-3961 (SQL injection vulnerability in user.php in Super Serious Stats (aka ...)
 	NOT-FOR-US: Super Serious Stats
 CVE-2009-3960 (Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in ...)
-	TODO: check
+	NOT-FOR-US: LiveCycle
 CVE-2009-3959 (Integer overflow in the U3D implementation in Adobe Reader and Acrobat ...)
 	NOT-FOR-US: Adobe Reader and Acrobat 8.0
 CVE-2009-3958 (Buffer overflow in the Download Manager in Adobe Reader and Acrobat ...)