[Secure-testing-commits] r22005 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2013-04-20 14:24:53 +0000 (Sat, 20 Apr 2013)
New Revision: 22005

Modified:
   data/CVE/list
Log:
add NFUs

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-04-20 05:47:33 UTC (rev 22004)
+++ data/CVE/list	2013-04-20 14:24:53 UTC (rev 22005)
@@ -3350,9 +3350,9 @@
 CVE-2013-1750 (Heap-based buffer overflow in RealNetworks RealPlayer before 16.0.1.18 ...)
 	NOT-FOR-US: RealPlayer
 CVE-2013-1749 (Cross-site scripting (XSS) vulnerability in edit.php in PHP Address ...)
-	TODO: check
+	NOT-FOR-US: PHP Address Book
 CVE-2013-1748 (Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow ...)
-	TODO: check
+	NOT-FOR-US: PHP Address Book
 CVE-2012-6533 (Buffer overflow in pgpwded.sys in Symantec PGP Desktop 10.x and ...)
 	NOT-FOR-US: Symantec PGP Desktop
 CVE-2013-1747 (channel.c in ngIRCd 20 and 20.1 allows remote attackers to cause a ...)
@@ -4692,7 +4692,7 @@
 CVE-2013-1200
 	RESERVED
 CVE-2013-1199 (Race condition in the CIFS implementation in the rewriter module in ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2013-1198
 	RESERVED
 CVE-2013-1197 (The XML parser in the server in Cisco Unified Presence (CUP) allows ...)
@@ -4702,7 +4702,7 @@
 CVE-2013-1195
 	RESERVED
 CVE-2013-1194 (The ISAKMP implementation on Cisco Adaptive Security Appliances (ASA) ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2013-1193 (The Secure Shell (SSH) implementation on Cisco Adaptive Security ...)
 	NOT-FOR-US: Cisco
 CVE-2013-1192
@@ -4736,9 +4736,9 @@
 CVE-2013-1178
 	RESERVED
 CVE-2013-1177 (SQL injection vulnerability in Cisco Network Admission Control (NAC) ...)
-	TODO: check
+	NOT-FOR-US: Cisco Network Admission Control Manager
 CVE-2013-1176 (The DSP card on Cisco TelePresence MCU 4500 and 4501 devices before ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2013-1175
 	RESERVED
 CVE-2013-1174 (Cisco Tivoli Business Service Manager (TBSM) in Hosted Collaboration ...)
@@ -4918,7 +4918,7 @@
 CVE-2013-1087
 	RESERVED
 CVE-2013-1086 (Cross-site scripting (XSS) vulnerability in WebAccess in Novell ...)
-	TODO: check
+	NOT-FOR-US: Novell GroupWise
 CVE-2013-1085 (Stack-based buffer overflow in the nim: protocol handler in Novell ...)
 	NOT-FOR-US: Novell Messenger
 CVE-2013-1084
@@ -5545,7 +5545,7 @@
 CVE-2013-0791 (The CERT_DecodeCertPackage function in Mozilla Network Security ...)
 	TODO: check
 CVE-2013-0790 (Unspecified vulnerability in the browser engine in Mozilla Firefox ...)
-	TODO: check
+	NOT-FOR-US: Mozilla Firefox on Android
 CVE-2013-0789 (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...)
 	- iceweasel <unfixed>
 	NOTE: fixed in experimental 20.0-1
@@ -7612,7 +7612,7 @@
 CVE-2013-0140
 	RESERVED
 CVE-2013-0139 (The Arecont Vision AV1355DN MegaDome camera allows remote attackers to ...)
-	TODO: check
+	NOT-FOR-US: Arecont Vision
 CVE-2013-0138
 	RESERVED
 CVE-2013-0137
@@ -7624,9 +7624,9 @@
 CVE-2013-0134 (Cross-site scripting (XSS) vulnerability in the web interface in ...)
 	NOT-FOR-US: AirDroid
 CVE-2013-0133 (Untrusted search path vulnerability in ...)
-	TODO: check
+	NOT-FOR-US: Parallels Plesk Panel
 CVE-2013-0132 (The suexec implementation in Parallels Plesk Panel 11.0.9 contains a ...)
-	TODO: check
+	NOT-FOR-US: Parallels Plesk Panel
 CVE-2013-0131 (Buffer overflow in the NVIDIA GPU driver before 304.88, 310.x before ...)
 	- nvidia-graphics-drivers 304.88-1 (bug #704547)
 	[wheezy] - nvidia-graphics-drivers <no-dsa> (Non-free not supported)