[Secure-testing-commits] r22230 - data/CVE

Salvatore Bonaccorso carnil at alioth.debian.org
Sat May 11 08:55:39 UTC 2013 

Author: carnil
Date: 2013-05-11 08:55:39 +0000 (Sat, 11 May 2013)
New Revision: 22230

Modified:
   data/CVE/list
Log:
add NFUs

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-05-11 08:34:23 UTC (rev 22229)
+++ data/CVE/list	2013-05-11 08:55:39 UTC (rev 22230)
@@ -45,9 +45,9 @@
 CVE-2013-3499 (GroundWork Monitor Enterprise 6.7.0 performs authentication on the ...)
 	NOT-FOR-US: GroundWork Monitor Enterprise
 CVE-2013-3498 (Cross-site scripting (XSS) vulnerability in Juniper SmartPass WLAN ...)
-	TODO: check
+	NOT-FOR-US: Juniper
 CVE-2013-3497 (Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance ...)
-	TODO: check
+	NOT-FOR-US: Juniper
 CVE-2013-3496
 	RESERVED
 CVE-2013-3495
@@ -369,7 +369,7 @@
 CVE-2013-3337
 	RESERVED
 CVE-2013-3336 (Unspecified vulnerability in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and ...)
-	TODO: check
+	NOT-FOR-US: Adobe ColdFusion
 CVE-2013-3335
 	RESERVED
 CVE-2013-3334
@@ -1131,7 +1131,7 @@
 CVE-2013-2978
 	RESERVED
 CVE-2013-2977 (Integer overflow in IBM Notes 8.5.x before 8.5.3 FP4 Interim Fix 1 and ...)
-	TODO: check
+	NOT-FOR-US: IBM Notes
 CVE-2013-2976
 	RESERVED
 CVE-2013-2975
@@ -2671,7 +2671,7 @@
 CVE-2013-2309
 	RESERVED
 CVE-2013-2308 (The (1) OWA Helper and (2) OSG Lite programs in SoftBank Online ...)
-	TODO: check
+	NOT-FOR-US: SoftBank Online Service Gate
 CVE-2013-2307 (The Yahoo! Browser application before 1.4.3 for Android allows remote ...)
 	NOT-FOR-US: Yahoo! Browser application for Android
 CVE-2013-2306 (The jigbrowser+ application before 1.6.4 for Android does not properly ...)
@@ -4503,7 +4503,7 @@
 CVE-2013-1612
 	RESERVED
 CVE-2013-1611 (Multiple cross-site scripting (XSS) vulnerabilities in ...)
-	TODO: check
+	NOT-FOR-US: Symantec Brightmail Gateway
 CVE-2013-1610
 	RESERVED
 CVE-2013-1609 (Multiple unquoted Windows search path vulnerabilities in the (1) File ...)
@@ -5445,7 +5445,7 @@
 CVE-2013-1243
 	RESERVED
 CVE-2013-1242 (Memory leak in the web framework in the server in Cisco Unified ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2013-1241 (The ISM module in Cisco IOS on ISR G2 routers does not properly handle ...)
 	NOT-FOR-US: Cisco IOS
 CVE-2013-1240 (The command-line interface in Cisco Unified Communications Manager ...)
@@ -5479,17 +5479,17 @@
 CVE-2013-1226 (The Ethernet frame-forwarding implementation in Cisco NX-OS on Nexus ...)
 	NOT-FOR-US: Cisco NX-OS
 CVE-2013-1225 (Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 ...)
-	TODO: check
+	NOT-FOR-US: Cisco Unified Customer Voice Portal
 CVE-2013-1224 (Directory traversal vulnerability in the Resource Manager in Cisco ...)
-	TODO: check
+	NOT-FOR-US: Cisco Unified Customer Voice Portal
 CVE-2013-1223 (The log viewer in Cisco Unified Customer Voice Portal (CVP) Software ...)
-	TODO: check
+	NOT-FOR-US: Cisco Unified Customer Voice Portal
 CVE-2013-1222 (The Tomcat Web Management feature in Cisco Unified Customer Voice ...)
-	TODO: check
+	NOT-FOR-US: Cisco Unified Customer Voice Portal
 CVE-2013-1221 (The Tomcat Web Management feature in Cisco Unified Customer Voice ...)
-	TODO: check
+	NOT-FOR-US: Cisco Unified Customer Voice Portal
 CVE-2013-1220 (The CallServer component in Cisco Unified Customer Voice Portal (CVP) ...)
-	TODO: check
+	NOT-FOR-US: Cisco Unified Customer Voice Portal
 CVE-2013-1219 (SensorApp in Cisco Intrusion Prevention System (IPS) allows local ...)
 	NOT-FOR-US: Cisco Intrusion Prevention System
 CVE-2013-1218
@@ -6041,7 +6041,7 @@
 CVE-2013-0947
 	RESERVED
 CVE-2013-0946 (Buffer overflow in the Library Control Program (LCP) in EMC AlphaStor ...)
-	TODO: check
+	NOT-FOR-US: EMC
 CVE-2013-0945 (EMC Avamar Client before 6.1.101-89 does not verify that the server ...)
 	NOT-FOR-US: EMC Avamar
 CVE-2013-0944 (The web-based file-restore interface in EMC Avamar Server before 6.1.0 ...)
@@ -6055,11 +6055,11 @@
 CVE-2013-0940 (The nsrpush process in the client in EMC NetWorker before 7.6.5.3 and ...)
 	NOT-FOR-US: EMC NetWorker
 CVE-2013-0939 (EMC Documentum Webtop before 6.7 SP2, Documentum WDK before 6.7 SP2, ...)
-	TODO: check
+	NOT-FOR-US: EMC
 CVE-2013-0938 (Cross-site scripting (XSS) vulnerability in EMC Documentum Webtop ...)
-	TODO: check
+	NOT-FOR-US: EMC
 CVE-2013-0937 (Session fixation vulnerability in EMC Documentum Webtop before 6.7 ...)
-	TODO: check
+	NOT-FOR-US: EMC
 CVE-2013-0936 (Cross-site scripting (XSS) vulnerability in EMC Smarts IP Manager, ...)
 	NOT-FOR-US: EMC
 CVE-2013-0935 (EMC Smarts Network Configuration Manager (NCM) before 9.2 does not ...)
@@ -6839,15 +6839,15 @@
 CVE-2013-0689
 	RESERVED
 CVE-2013-0688 (Cross-site scripting (XSS) vulnerability in Invensys Wonderware ...)
-	TODO: check
+	NOT-FOR-US: Invensys Wonderware Information Server
 CVE-2013-0687 (The installer routine in Schneider Electric MiCOM S1 Studio uses ...)
 	NOT-FOR-US: Schneider Electric
 CVE-2013-0686 (Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5- Portal, ...)
-	TODO: check
+	NOT-FOR-US: Invensys Wonderware Information Server
 CVE-2013-0685 (Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5- Portal, ...)
-	TODO: check
+	NOT-FOR-US: Invensys Wonderware Information Server
 CVE-2013-0684 (SQL injection vulnerability in Invensys Wonderware Information Server ...)
-	TODO: check
+	NOT-FOR-US: Invensys Wonderware Information Server
 CVE-2013-0683 (The DataSim and DataPid demonstration clients in Cogent Real-Time ...)
 	NOT-FOR-US: DataSim and DataPid demonstration clients
 CVE-2013-0682 (Cogent Real-Time Systems Cogent DataHub before 7.3.0, OPC DataHub ...)
@@ -7031,7 +7031,7 @@
 	[wheezy] - lemonldap-ng 1.1.2-5+deb7u1
 	[squeeze] - lemonldap-ng <not-affected> (SAML code not present)
 CVE-2013-0600 (Unspecified vulnerability on IBM WebSphere DataPower XC10 Appliance ...)
-	TODO: check
+	NOT-FOR-US: IBM WebSphere DataPower XC10 Appliance devices
 CVE-2013-0599
 	RESERVED
 CVE-2013-0598
@@ -7075,7 +7075,7 @@
 CVE-2013-0579
 	RESERVED
 CVE-2013-0578 (The Sterling Order Management APIs in IBM Sterling Multi-Channel ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2013-0577
 	RESERVED
 CVE-2013-0576
@@ -7191,11 +7191,11 @@
 CVE-2013-0521
 	RESERVED
 CVE-2013-0520 (IBM Sterling Secure Proxy 3.2.0 and 3.3.01 before 3.3.01.23 Interim ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2013-0519 (IBM Sterling Secure Proxy 3.2.0 and 3.3.01 before 3.3.01.23 Interim ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2013-0518 (IBM Sterling Secure Proxy 3.2.0 and 3.3.01 before 3.3.01.23 Interim ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2013-0517
 	RESERVED
 CVE-2013-0516

More information about the Secure-testing-commits mailing list