[Secure-testing-commits] r15937 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2011-01-21 22:38:17 +0000 (Fri, 21 Jan 2011)
New Revision: 15937

Modified:
   data/CVE/list
Log:
NFUs


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2011-01-21 22:27:25 UTC (rev 15936)
+++ data/CVE/list	2011-01-21 22:38:17 UTC (rev 15937)
@@ -290,13 +290,13 @@
 CVE-2011-0494 (Directory traversal vulnerability in WebSEAL in IBM Tivoli Access ...)
 	NOT-FOR-US: IBM Tivoli Access Manager
 CVE-2011-0489 (The server components in Objectivity/DB 10.0 do not require ...)
-	TODO: check
+	NOT-FOR-US: Objectivity/DB
 CVE-2011-0488 (Stack-based buffer overflow in NTWebServer.exe in the test web service ...)
-	TODO: check
+	NOT-FOR-US: NTWebServer
 CVE-2011-0487 (ICQ 7 does not verify the authenticity of updates, which allows ...)
-	TODO: check
+	NOT-FOR-US: ICQ
 CVE-2011-0486 (Cross-site scripting (XSS) vulnerability in cognos.cgi in IBM Cognos 8 ...)
-	TODO: check
+	NOT-FOR-US: IBM Cognos
 CVE-2010-4700 (The set_magic_quotes_runtime function in PHP 5.3.2 and 5.3.3, when the ...)
 	- php5 <unfixed>
 CVE-2010-4699 (The iconv_mime_decode_headers function in the Iconv extension in PHP ...)
@@ -306,9 +306,9 @@
 CVE-2010-4697 (Use-after-free vulnerability in the Zend engine in PHP before 5.2.15 ...)
 	- php5 <unfixed>
 CVE-2010-4696 (Multiple SQL injection vulnerabilities in Joomla! 1.5.x before 1.5.22 ...)
-	TODO: check
+	NOT-FOR-US: Joomla
 CVE-2009-5051 (Hastymail2 before RC 8 does not set the secure flag for the session ...)
-	TODO: check
+	NOT-FOR-US: Hastymail
 CVE-2011-0493 (Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha might allow ...)
 	{DSA-2148-1}
 	- tor 0.2.1.29-1
@@ -907,7 +907,7 @@
 CVE-2010-4647 (Multiple cross-site scripting (XSS) vulnerabilities in the Help ...)
 	- eclipse <unfixed>
 CVE-2010-4646 (Cross-site scripting (XSS) vulnerability in Hastymail2 before 1.01 ...)
-	TODO: check
+	NOT-FOR-US: Hastymail
 CVE-2010-4644 (Multiple memory leaks in rev_hunt.c in Apache Subversion before 1.6.15 ...)
 	- subversion 1.6.12dfsg-3 (bug #608989)
 	NOTE: http://www.openwall.com/lists/oss-security/2011/01/04/8
@@ -1024,7 +1024,7 @@
 CVE-2011-0273
 	RESERVED
 CVE-2011-0272 (Unspecified vulnerability in HP LoadRunner 9.52 allows remote ...)
-	TODO: check
+	NOT-FOR-US: HP LoadRunner
 CVE-2011-0271 (The CGI scripts in HP OpenView Network Node Manager (OV NNM) 7.51 and ...)
 	NOT-FOR-US: HP OpenView
 CVE-2011-0270 (Format string vulnerability in nnmRptConfig.exe in HP OpenView Network ...)
@@ -1973,29 +1973,29 @@
 CVE-2010-4465
 	RESERVED
 CVE-2010-4464 (Unspecified vulnerability in Oracle Sun Convergence 1.0 allows remote ...)
-	TODO: check
+	NOT-FOR-US: Oracle Convergence
 CVE-2010-4463
 	RESERVED
 CVE-2010-4462
 	RESERVED
 CVE-2010-4461 (Unspecified vulnerability in the PeopleSoft Enterprise HRMS component ...)
-	TODO: check
+	NOT-FOR-US: PeopleSoft
 CVE-2010-4460 (Unspecified vulnerability in Oracle Solaris 10 allows local users to ...)
-	TODO: check
+	NOT-FOR-US: Solaris
 CVE-2010-4459 (Unspecified vulnerability in Oracle Solaris 11 Express allows local ...)
-	TODO: check
+	NOT-FOR-US: Solaris
 CVE-2010-4458 (Unspecified vulnerability in Oracle Solaris 11 Express allows local ...)
-	TODO: check
+	NOT-FOR-US: Solaris
 CVE-2010-4457 (Unspecified vulnerability in Oracle Solaris 11 Express allows remote ...)
-	TODO: check
+	NOT-FOR-US: Solaris
 CVE-2010-4456 (Unspecified vulnerability in Oracle Sun Java System Communications ...)
 	TODO: check
 CVE-2010-4455 (Unspecified vulnerability in the Oracle HTTP Server component in ...)
-	TODO: check
+	NOT-FOR-US: Oracle Fusion
 CVE-2010-4454
 	RESERVED
 CVE-2010-4453 (Unspecified vulnerability in the Oracle WebLogic Server component in ...)
-	TODO: check
+	NOT-FOR-US: Oracle WebLogic
 CVE-2010-4452
 	RESERVED
 CVE-2010-4451
@@ -2003,21 +2003,21 @@
 CVE-2010-4450
 	RESERVED
 CVE-2010-4449 (Unspecified vulnerability in the Audit Vault component in Oracle Audit ...)
-	TODO: check
+	NOT-FOR-US: Oracle Audit
 CVE-2010-4448
 	RESERVED
 CVE-2010-4447
 	RESERVED
 CVE-2010-4446 (Unspecified vulnerability in Oracle Solaris 11 Express allows local ...)
-	TODO: check
+	NOT-FOR-US: Solaris
 CVE-2010-4445 (Unspecified vulnerability in the PeopleSoft Enterprise HRMS component ...)
 	TODO: check
 CVE-2010-4444 (Unspecified vulnerability in Oracle Sun Java System Access Manager and ...)
 	TODO: check
 CVE-2010-4443 (Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows ...)
-	TODO: check
+	NOT-FOR-US: Solaris
 CVE-2010-4442 (Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows ...)
-	TODO: check
+	NOT-FOR-US: Solaris
 CVE-2010-4441 (Unspecified vulnerability in the PeopleSoft Enterprise HRMS component ...)
 	TODO: check
 CVE-2010-4440 (Unspecified vulnerability in Oracle 10 and 11 Express allows local ...)
@@ -2031,11 +2031,11 @@
 CVE-2010-4436 (Unspecified vulnerability in Oracle Sun Management Center (SunMC) 4.0 ...)
 	TODO: check
 CVE-2010-4435 (Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows remote ...)
-	TODO: check
+	NOT-FOR-US: Solaris
 CVE-2010-4434 (Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools ...)
 	TODO: check
 CVE-2010-4433 (Unspecified vulnerability in Oracle Solaris 10 allows remote attackers ...)
-	TODO: check
+	NOT-FOR-US: Solaris
 CVE-2010-4432 (Unspecified vulnerability in the Oracle Transportation Manager ...)
 	TODO: check
 CVE-2010-4431 (Unspecified vulnerability in Oracle Sun Java System Portal Server 7.1 ...)