[Secure-testing-commits] r14954 - data/CVE

[Michael Gilbert]

Author: gilbert-guest
Date: 2010-07-03 02:44:43 +0000 (Sat, 03 Jul 2010)
New Revision: 14954

Modified:
   data/CVE/list
Log:
NFUs

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-07-02 21:14:30 UTC (rev 14953)
+++ data/CVE/list	2010-07-03 02:44:43 UTC (rev 14954)
@@ -1,23 +1,26 @@
+CVE-2010-XXXX [l2tp oops]
+	- linux-2.6 <unfixed>
+	[lenny] - linux-2.6 <not-affected> (vulnerability introduced in 2.6.29)
 CVE-2010-2618 (PHP remote file inclusion vulnerability in inc/smarty/libs/init.php in ...)
-	TODO: check
+	NOT-FOR-US: AdaptCMS
 CVE-2010-2617 (Cross-site scripting (XSS) vulnerability in bible.php in PHP Bible ...)
-	TODO: check
+	NOT-FOR-US: PHP Bible Search
 CVE-2010-2616 (SQL injection vulnerability in bible.php in PHP Bible Search, probably ...)
-	TODO: check
+	NOT-FOR-US: PHP Bible Search
 CVE-2010-2615 (Multiple cross-site scripting (XSS) vulnerabilities in admin/admin.php ...)
-	TODO: check
+	NOT-FOR-US: Grafik CMS
 CVE-2010-2614 (SQL injection vulnerability in admin/admin.php in Grafik CMS 1.1.2, ...)
-	TODO: check
+	NOT-FOR-US: Grafik CMS
 CVE-2010-2613 (Cross-site scripting (XSS) vulnerability in the JExtensions JE Awd ...)
-	TODO: check
+	NOT-FOR-US: com_awd_song component for joomla!
 CVE-2010-2612 (Unspecified vulnerability in the HP OpenVMS Auditing feature in ...)
-	TODO: check
+	NOT-FOR-US: HP OpenVMS
 CVE-2010-2611 (SQL injection vulnerability in show_search_result.php in i-netsolution ...)
-	TODO: check
+	NOT-FOR-US: i-netsolution Job Search Engine
 CVE-2010-2610 (Multiple SQL injection vulnerabilities in 2daybiz Job Site Script ...)
-	TODO: check
+	NOT-FOR-US: 2daybiz Job Site Script
 CVE-2010-2609 (SQL injection vulnerability in show_search_result.php in 2daybiz Job ...)
-	TODO: check
+	NOT-FOR-US: 2daybiz Job Search Engine Script
 CVE-2010-2608
 	RESERVED
 CVE-2010-2607
@@ -39,7 +42,7 @@
 CVE-2010-2599
 	RESERVED
 CVE-2010-2594 (Multiple cross-site request forgery (CSRF) vulnerabilities in the web ...)
-	TODO: check
+	NOT-FOR-US: InterSect Allience Snare Agent
 CVE-2010-2593
 	RESERVED
 CVE-2010-2592
@@ -922,6 +925,7 @@
 CVE-2010-2234
 	RESERVED
 CVE-2010-2233 (tif_getimage.c in LibTIFF 3.9.0 and 3.9.2 on 64-bit platforms, as used ...)
+	- tiff <undetermined>
 	TODO: check
 CVE-2010-2232
 	RESERVED
@@ -2760,7 +2764,7 @@
 CVE-2010-1523
 	RESERVED
 CVE-2010-1522 (Multiple SQL injection vulnerabilities in the BookLibrary Basic ...)
-	TODO: check
+	NOT-FOR-US: com_booklibrary component for joomla!
 CVE-2010-1521 (SQL injection vulnerability in include/classes/tzn_user.php in ...)
 	NOT-FOR-US: TaskFreak! Original multi user
 CVE-2010-1520 (Cross-site scripting (XSS) vulnerability in logout.php in TaskFreak! ...)