[Secure-testing-commits] r21786 - data/CVE

Federico Ceratto federico-guest at alioth.debian.org
Sat Mar 30 14:33:47 UTC 2013 

Author: federico-guest
Date: 2013-03-30 14:33:47 +0000 (Sat, 30 Mar 2013)
New Revision: 21786

Modified:
   data/CVE/list
Log:
NFUs

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-03-30 08:37:23 UTC (rev 21785)
+++ data/CVE/list	2013-03-30 14:33:47 UTC (rev 21786)
@@ -1040,7 +1040,7 @@
 CVE-2013-2291
 	RESERVED
 CVE-2013-2290 (Cross-site scripting (XSS) vulnerability in the dashboard of the ...)
-	TODO: check
+	NOT-FOR-US: Aruba Networks ArubaOS
 CVE-2013-2289
 	RESERVED
 CVE-2013-2288
@@ -1093,7 +1093,7 @@
 	[squeeze] - chromium-browser <not-affected> (Vulnerable code not present)
 	NOTE: MathML added in chromium 24.x, disabled again in 25.x
 CVE-2012-6534 (Novell Sentinel Log Manager before 1.2.0.3 allows remote attackers to ...)
-	TODO: check
+	NOT-FOR-US: Novell Sentinel Log Manager
 CVE-2013-2267
 	RESERVED
 CVE-2013-2266 (libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before ...)
@@ -3400,7 +3400,7 @@
 CVE-2013-1300
 	RESERVED
 CVE-2013-1299 (Microsoft Windows Modern Mail allows remote attackers to spoof link ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Windows Modern Mail
 CVE-2013-1298
 	RESERVED
 CVE-2013-1297
@@ -3716,19 +3716,19 @@
 CVE-2013-1149
 	RESERVED
 CVE-2013-1148 (The General Responder implementation in the IP Service Level Agreement ...)
-	TODO: check
+	NOT-FOR-US: Cisco IOS
 CVE-2013-1147 (The Protocol Translation (PT) functionality in Cisco IOS 12.3 through ...)
-	TODO: check
+	NOT-FOR-US: Cisco IOS
 CVE-2013-1146 (The Smart Install client functionality in Cisco IOS 12.2 and 15.0 ...)
-	TODO: check
+	NOT-FOR-US: Cisco IOS
 CVE-2013-1145 (Memory leak in Cisco IOS 12.2, 12.4, 15.0, and 15.1, when Zone-Based ...)
-	TODO: check
+	NOT-FOR-US: Cisco IOS
 CVE-2013-1144 (Memory leak in the IKEv1 implementation in Cisco IOS 15.1 allows ...)
-	TODO: check
+	NOT-FOR-US: Cisco IOS
 CVE-2013-1143 (The RSVP protocol implementation in Cisco IOS 12.2 and 15.0 through ...)
-	TODO: check
+	NOT-FOR-US: Cisco IOS
 CVE-2013-1142 (Race condition in the VRF-aware NAT feature in Cisco IOS 12.2 through ...)
-	TODO: check
+	NOT-FOR-US: Cisco IOS
 CVE-2013-1141 (The mDNS snooping functionality on Cisco Wireless LAN Controller (WLC) ...)
 	NOT-FOR-US: Cisco Wireless LAN Controller
 CVE-2013-1140 (The XML parser in Cisco Security Monitoring, Analysis, and Response ...)
@@ -3842,19 +3842,19 @@
 CVE-2013-1086
 	RESERVED
 CVE-2013-1085 (Stack-based buffer overflow in the nim: protocol handler in Novell ...)
-	TODO: check
+	NOT-FOR-US: Novell Messenger
 CVE-2013-1084
 	RESERVED
 CVE-2013-1083 (Unspecified vulnerability in the login functionality in the Reporting ...)
-	TODO: check
+	NOT-FOR-US: Novell Identity Manager
 CVE-2013-1082 (Directory traversal vulnerability in DUSAP.php in Novell ZENworks ...)
-	TODO: check
+	NOT-FOR-US: Novell ZENworks
 CVE-2013-1081 (Directory traversal vulnerability in MDM.php in Novell ZENworks Mobile ...)
 	NOT-FOR-US: Novell ZENworks
 CVE-2013-1080 (The web server in Novell ZENworks Configuration Management (ZCM) 10.3 ...)
-	TODO: check
+	NOT-FOR-US: Novell ZENworks
 CVE-2013-1079 (Directory traversal vulnerability in the ISCreateObject method in an ...)
-	TODO: check
+	NOT-FOR-US: Novell ZENworks
 CVE-2013-1078
 	RESERVED
 CVE-2013-1077
@@ -4747,11 +4747,11 @@
 CVE-2013-0721 (wp-php-widget.php in the WP PHP widget plugin 1.0.2 for WordPress ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2013-0720 (The COBIME application before 0.9.4 for Android uses weak permissions ...)
-	TODO: check
+	NOT-FOR-US: COBIME
 CVE-2013-0719 (The ArtIME Japanese Input application 1.1.2 and earlier for Android ...)
-	TODO: check
+	NOT-FOR-US: ArtIME Japanese Input application
 CVE-2013-0718 (The Simeji application 4.8.1 and earlier for Android uses weak ...)
-	TODO: check
+	NOT-FOR-US: Simeji
 CVE-2013-0717 (Multiple cross-site request forgery (CSRF) vulnerabilities in the ...)
 	NOT-FOR-US: NEC Aterm routers
 CVE-2013-0716 (The web server in Wind River VxWorks 5.5 through 6.9 allows remote ...)
@@ -5222,7 +5222,7 @@
 CVE-2013-0533
 	RESERVED
 CVE-2013-0532 (Cross-site request forgery (CSRF) vulnerability in IBM Security ...)
-	TODO: check
+	NOT-FOR-US: IBM Security AppScan Enterprise
 CVE-2013-0531
 	RESERVED
 CVE-2013-0530
@@ -5260,13 +5260,13 @@
 CVE-2013-0514
 	RESERVED
 CVE-2013-0513 (IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM ...)
-	TODO: check
+	NOT-FOR-US: IBM Security AppScan Enterprise, Rational Policy Tester
 CVE-2013-0512 (Stack-based buffer overflow in the Manual Explore browser plug-in for ...)
-	TODO: check
+	NOT-FOR-US: IBM Security AppScan Enterprise, Rational Policy Tester
 CVE-2013-0511 (Multiple SQL injection vulnerabilities in IBM Security AppScan ...)
-	TODO: check
+	NOT-FOR-US: IBM Security AppScan Enterprise
 CVE-2013-0510 (IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 includes a ...)
-	TODO: check
+	NOT-FOR-US: IBM Security AppScan Enterprise
 CVE-2013-0509
 	RESERVED
 CVE-2013-0508
@@ -5338,9 +5338,9 @@
 CVE-2013-0475
 	RESERVED
 CVE-2013-0474 (The Manual Explore browser plug-in in IBM Security AppScan Enterprise ...)
-	TODO: check
+	NOT-FOR-US: IBM Security AppScan Enterprise
 CVE-2013-0473 (Multiple cross-site scripting (XSS) vulnerabilities in IBM Security ...)
-	TODO: check
+	NOT-FOR-US: IBM Security AppScan Enterprise
 CVE-2013-0472 (The Web GUI in the client in IBM Tivoli Storage Manager (TSM) 6.3 ...)
 	NOT-FOR-US: IBM
 CVE-2013-0471 (The traditional scheduler in the client in IBM Tivoli Storage Manager ...)
@@ -5384,7 +5384,7 @@
 CVE-2013-0453 (Cross-site scripting (XSS) vulnerability in Web Reports in IBM Tivoli ...)
 	NOT-FOR-US: IBM Tivoli Endpoint Manager
 CVE-2013-0452 (Cross-site request forgery (CSRF) vulnerability in the Software Use ...)
-	TODO: check
+	NOT-FOR-US: IBM Tivoli Endpoint Manager
 CVE-2013-0451
 	RESERVED
 CVE-2012-6425
@@ -7945,7 +7945,7 @@
 CVE-2012-5880
 	RESERVED
 CVE-2012-5879 (An ActiveX control in McHealthCheck.dll in McAfee Virtual Technician ...)
-	TODO: check
+	NOT-FOR-US: McAfee Virtual Technician
 CVE-2012-5878
 	RESERVED
 CVE-2012-5877
@@ -9679,7 +9679,7 @@
 CVE-2012-5217
 	RESERVED
 CVE-2012-5216 (Cross-site request forgery (CSRF) vulnerability on HP ProCurve 1700-8 ...)
-	TODO: check
+	NOT-FOR-US: HP ProCurve
 CVE-2012-5215 (Unspecified vulnerability on the HP LaserJet Pro M1212nf, M1213nf, ...)
 	NOT-FOR-US: HP LaserJet Pro
 CVE-2012-5214 (Unspecified vulnerability in HP ServiceCenter 6.2.8 before 6.2.8.10 ...)

More information about the Secure-testing-commits mailing list