[Secure-testing-commits] r15837 - data/CVE

[Jonathan Wiltshire]

Author: jmw
Date: 2011-01-12 22:17:10 +0000 (Wed, 12 Jan 2011)
New Revision: 15837

Modified:
   data/CVE/list
Log:
NFUs
Mark Piwik issues with ITP bug #560933


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2011-01-12 22:02:45 UTC (rev 15836)
+++ data/CVE/list	2011-01-12 22:17:10 UTC (rev 15837)
@@ -1,5 +1,5 @@
 CVE-2011-0423 (The PolyVision RoomWizard with firmware 3.2.3 has a default password ...)
-	TODO: check
+	NOT-FOR-US: PolyVision RoomWizard
 CVE-2011-0422
 	RESERVED
 CVE-2011-0421
@@ -33,25 +33,25 @@
 CVE-2011-0407 (SQL injection vulnerability in the store function in ...)
 	TODO: check
 CVE-2011-0406 (Heap-based buffer overflow in HistorySvr.exe in WellinTech KingView ...)
-	TODO: check
+	NOT-FOR-US: WellinTech KingView
 CVE-2011-0405 (Directory traversal vulnerability in module.php in PhpGedView 4.2.3 ...)
 	TODO: check
 CVE-2011-0404 (Stack-based buffer overflow in NetSupport Manager Agent for Linux ...)
 	TODO: check
 CVE-2011-0403 (Untrusted search path vulnerability in ImgBurn.exe in [VENDOR] ImgBurn ...)
-	TODO: check
+	NOT-FOR-US: ImgBurn
 CVE-2011-0402 (dpkg-source in dpkg before 1.14.31 and 1.15.x allows user-assisted ...)
 	TODO: check
 CVE-2011-0401 (Piwik before 1.1 does not properly limit the number of files stored ...)
-	TODO: check
+	- piwik <itp> (bug #506933)
 CVE-2011-0400 (Cookie.php in Piwik before 1.1 does not set the secure flag for the ...)
-	TODO: check
+	- piwik <itp> (bug #506933)
 CVE-2011-0399 (Piwik before 1.1 does not prevent the rendering of the login form ...)
-	TODO: check
+	- piwik <itp> (bug #506933)
 CVE-2011-0398 (The Piwik_Common::getIP function in Piwik before 1.1 does not properly ...)
-	TODO: check
+	- piwik <itp> (bug #506933)
 CVE-2010-4693 (Multiple cross-site scripting (XSS) vulnerabilities in Coppermine ...)
-	TODO: check
+	NOT-FOR-US: Coppermine Photo Gallery
 CVE-2011-0397
 	RESERVED
 CVE-2011-0396
@@ -213,11 +213,11 @@
 CVE-2011-0317
 	RESERVED
 CVE-2011-0316 (The Administrative Console component in IBM WebSphere Application ...)
-	TODO: check
+	NOT-FOR-US: IBM WebSphere Application Server
 CVE-2011-0315 (Cross-site scripting (XSS) vulnerability in the Servlet Engine / Web ...)
-	TODO: check
+	NOT-FOR-US: IBM WebSphere Application Server
 CVE-2011-0314 (Heap-based buffer overflow in IBM WebSphere MQ 6.0 before 6.0.2.11 and ...)
-	TODO: check
+	NOT-FOR-US: IBM WebSphere MQ
 CVE-2011-0313
 	RESERVED
 CVE-2011-0312
@@ -1171,9 +1171,9 @@
 CVE-2011-0028
 	RESERVED
 CVE-2011-0027 (Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Data Access Components
 CVE-2011-0026 (Buffer overflow in an ODBC API in Microsoft Data Access Components ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Data Access Components
 CVE-2010-XXXX [ircd-ratbox password disclosure?]
 	- ircd-ratbox 3.0.6.dfsg-2
 	TODO: check
@@ -1352,9 +1352,9 @@
 	- linux-2.6 2.6.32-30
 	[lenny] - linux-2.6 <not-affected> (Introduced in 2.6.30)
 CVE-2011-0005 (Cross-site scripting (XSS) vulnerability in the com_search module for ...)
-	TODO: check
+	NOT-FOR-US: Joomla
 CVE-2011-0004 (Multiple cross-site scripting (XSS) vulnerabilities in Piwik before ...)
-	TODO: check
+	- piwik <itp> (bug #506933)
 CVE-2011-0003 (MediaWiki before 1.16.1, when user or site JavaScript or CSS is ...)
 	{DTSA-207-1}
 	- mediawiki <unfixed>