[Secure-testing-commits] r19965 - in data: CVE DSA

[Moritz Muehlenhoff]

Author: jmm
Date: 2012-08-17 20:48:01 +0000 (Fri, 17 Aug 2012)
New Revision: 19965

Modified:
   data/CVE/list
   data/DSA/list
Log:
NFUs
additional spip issue fixed


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2012-08-17 09:14:18 UTC (rev 19964)
+++ data/CVE/list	2012-08-17 20:48:01 UTC (rev 19965)
@@ -3,7 +3,7 @@
 	- phpmyadmin 4:3.4.11.1-1
 	[squeeze] - phpmyadmin <not-affected> (Vulnerable code not present)
 CVE-2012-4344 (Cross-site scripting (XSS) vulnerability in Ipswitch WhatsUp Gold ...)
-	TODO: check
+	NOT-FOR-US: Ipswitch
 CVE-2012-4343 (Multiple unspecified vulnerabilities in Gallery 3 before 3.0.4 allow ...)
 	TODO: check
 CVE-2012-4342 (Multiple cross-site scripting (XSS) vulnerabilities in Gallery 3 ...)
@@ -11,7 +11,7 @@
 CVE-2012-4341 (Multiple stack-based buffer overflows in msg_server.exe in SAP ...)
 	TODO: check
 CVE-2012-4340 (Cross-site scripting (XSS) vulnerability in Sybase EAServer before 6.1 ...)
-	TODO: check
+	NOT-FOR-US: Sybase
 CVE-2012-4339
 	RESERVED
 CVE-2012-4338
@@ -21,21 +21,21 @@
 CVE-2012-4336
 	RESERVED
 CVE-2012-4335 (Samsung NET-i viewer 1.37.120316 allows remote attackers to cause a ...)
-	TODO: check
+	NOT-FOR-US: Samsung NET-i
 CVE-2012-4334 (The ConnectDDNS method in the (1) STWConfigNVR 1.1.13.15 and (2) ...)
-	TODO: check
+	NOT-FOR-US: Samsung NET-i
 CVE-2012-4333 (Multiple stack-based buffer overflows in the BackupToAvi method in the ...)
-	TODO: check
+	NOT-FOR-US: Samsung NET-i
 CVE-2012-4332 (The ShareYourCart plugin 1.7.1 for WordPress allows remote attackers ...)
-	TODO: check
+	NOT-FOR-US: Wordpress plugin
 CVE-2012-4331 (Multiple unspecified vulnerabilities in SPIP before 1.9.2.o, 2.0.x ...)
-	TODO: check
+	- spip 2.1.13-1
 CVE-2012-4330 (The Samsung D6000 TV and possibly other products allows remote ...)
-	TODO: check
+	NOT-FOR-US: Samsung D6000 TV
 CVE-2012-4329 (The Samsung D6000 TV and possibly other products allow remote ...)
-	TODO: check
+	NOT-FOR-US: Samsung D6000 TV
 CVE-2012-4328 (Unspecified vulnerability in the MAPI in vBulletin Suite 4.1.2 through ...)
-	TODO: check
+	NOT-FOR-US: vBulletin
 CVE-2012-4327 (Unspecified vulnerability in the Image News slider plugin before 3.3 ...)
 	NOT-FOR-US: Image News slider plugin for WordPress
 CVE-2012-4326 (Cross-site request forgery (CSRF) vulnerability in commonsettings.php ...)

Modified: data/DSA/list
===================================================================
--- data/DSA/list	2012-08-17 09:14:18 UTC (rev 19964)
+++ data/DSA/list	2012-08-17 20:48:01 UTC (rev 19965)
@@ -218,7 +218,7 @@
 	[squeeze] - imagemagick 8:6.6.0.4-3+squeeze3
 [26 Apr 2012] DSA-2461-1 spip - several
 	[squeeze] - spip 2.1.1-3squeeze3
-	{CVE-2012-2151}
+	{CVE-2012-2151 CVE-2012-4331}
 [25 Apr 2012] DSA-2460-1 asterisk - several
 	{CVE-2012-1183 CVE-2012-2414 CVE-2012-2415}
 	[squeeze] - asterisk 1:1.6.2.9-2+squeeze5