[Secure-testing-commits] r17727 - data/CVE

[Florian Weimer]

Author: fw
Date: 2011-12-01 19:18:17 +0000 (Thu, 01 Dec 2011)
New Revision: 17727

Modified:
   data/CVE/list
Log:
NFUs


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2011-12-01 15:36:56 UTC (rev 17726)
+++ data/CVE/list	2011-12-01 19:18:17 UTC (rev 17727)
@@ -137,17 +137,17 @@
 CVE-2011-4573
 	RESERVED
 CVE-2011-4572 (Cross-site scripting (XSS) vulnerability in inc/tesmodrewite.php in CF ...)
-	TODO: check
+	NOT-FOR-US: CF Image Hosting Script
 CVE-2011-4571 (SQL injection vulnerability in the Estate Agent (com_estateagent) ...)
-	TODO: check
+	NOT-FOR-US: Joomla extension
 CVE-2011-4570 (SQL injection vulnerability in the Time Returns (com_timereturns) ...)
-	TODO: check
+	NOT-FOR-US: Joomla extension
 CVE-2011-4569 (SQL injection vulnerability in userbarsettings.php in the Userbar ...)
-	TODO: check
+	NOT-FOR-US: MyBB extension
 CVE-2011-4568 (Cross-site scripting (XSS) vulnerability in view/frontend-head.php in ...)
-	TODO: check
+	NOT-FOR-US: Wordpress extension
 CVE-2011-4567 (Cross-site scripting (XSS) vulnerability in ...)
-	TODO: check
+	NOT-FOR-US: Zen Cart
 CVE-2011-4566 (Integer overflow in the exif_process_IFD_TAG function in exif.c in the ...)
 	- php5 <unfixed>
 CVE-2011-4565 (Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.5.1.a, ...)
@@ -208,9 +208,9 @@
 CVE-2011-4543
 	RESERVED
 CVE-2011-4542 (Hastymail2 2.1.1 before RC2 allows remote attackers to execute ...)
-	TODO: check
+	- hastymail <removed>
 CVE-2011-4541 (Cross-site scripting (XSS) vulnerability in index.php in Hastymail2 ...)
-	TODO: check
+	- hastymail <removed>
 CVE-2011-4540
 	RESERVED
 CVE-2011-4539
@@ -11881,7 +11881,7 @@
 CVE-2010-4696 (Multiple SQL injection vulnerabilities in Joomla! 1.5.x before 1.5.22 ...)
 	- joomla <itp> (bug #571794)
 CVE-2009-5051 (Hastymail2 before RC 8 does not set the secure flag for the session ...)
-	NOT-FOR-US: Hastymail
+	- hastymail <removed>
 CVE-2011-0493 (Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha might allow ...)
 	{DSA-2148-1}
 	- tor 0.2.1.29-1
@@ -12579,7 +12579,7 @@
 	- eclipse 3.5.2-9 (low; bug #611849)
 	[squeeze] - eclipse 3.5.2-6squeeze2
 CVE-2010-4646 (Cross-site scripting (XSS) vulnerability in Hastymail2 before 1.01 ...)
-	NOT-FOR-US: Hastymail
+	- hastymail <removed>
 CVE-2010-4644 (Multiple memory leaks in rev_hunt.c in Apache Subversion before 1.6.15 ...)
 	- subversion 1.6.12dfsg-3 (low; bug #608989)
 	[lenny] - subversion <no-dsa> (Minor issue)
@@ -61084,7 +61084,7 @@
 CVE-2004-2705 (Unspecified vulnerability in Player vs. Player Gaming Network (PvPGN) ...)
 	- pvpgn 1.6.4+20040826-1
 CVE-2004-2704 (Hastymail 1.0.1 and earlier (stable) and 1.1 and earlier (development) ...)
-	NOT-FOR-US: Hastymail
+	- hastymail <removed>
 CVE-2004-2703 (Clearswift MIMEsweeper 5.0.5, when it has been upgraded from ...)
 	NOT-FOR-US: MIMEsweeper
 CVE-2004-2702 (Cross-site scripting (XSS) vulnerability in login_up.php3 in Plesk 7.0 ...)
@@ -77930,7 +77930,7 @@
 CVE-2006-5314 (PHP remote file inclusion vulnerability in ftag.php in TribunaLibre ...)
 	NOT-FOR-US: TribunaLibre
 CVE-2006-5313 (Hastymail 1.5 and earlier before 20061008 allows remote authenticated ...)
-	NOT-FOR-US: Hastymail
+	- hastymail <removed>
 CVE-2006-5312 (PHP remote file inclusion vulnerability in shoutbox.php in the Ajax ...)
 	NOT-FOR-US: Ajax Shoutbox
 CVE-2006-5311 (PHP remote file inclusion vulnerability in ...)
@@ -78032,7 +78032,7 @@
 CVE-2006-5263 (Directory traversal vulnerability in templates/header.php3 in ...)
 	NOT-FOR-US: phpMyAgenda
 CVE-2006-5262 (CRLF injection vulnerability in lib/session.php in Hastymail 1.5 and ...)
-	NOT-FOR-US: Hastymail
+	- hastymail <removed>
 CVE-2006-5261 (Multiple PHP remote file inclusion vulnerabilities in PHPMyNews 1.4 ...)
 	NOT-FOR-US: PHPMyNews
 CVE-2006-5260 (PHP remote file inclusion vulnerability in compteur.php in Compteur 2 ...)