[Secure-testing-commits] r25278 - data/CVE

Federico Ceratto federico-guest at moszumanska.debian.org
Sat Jan 18 23:51:29 UTC 2014 

Author: federico-guest
Date: 2014-01-18 23:51:29 +0000 (Sat, 18 Jan 2014)
New Revision: 25278

Modified:
   data/CVE/list
Log:
NFUs

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-01-18 21:17:28 UTC (rev 25277)
+++ data/CVE/list	2014-01-18 23:51:29 UTC (rev 25278)
@@ -5660,7 +5660,7 @@
 CVE-2013-6143
 	RESERVED
 CVE-2013-6142 (DNP3Driver.exe in the DNP3 driver in Schneider Electric ClearSCADA ...)
-	TODO: check
+	NOT-FOR-US: Schneider Electric ClearSCADA
 CVE-2013-6141
 	RESERVED
 CVE-2013-6140
@@ -6172,7 +6172,7 @@
 	- openjdk-6 <unfixed>
 	- openjdk-7 7u51-2.4.4-1
 CVE-2013-5909 (Unspecified vulnerability in the PeopleSoft Enterprise HRMS component ...)
-	TODO: check
+	NOT-FOR-US: Oracle PeopleSoft Products
 CVE-2013-5908 (Unspecified vulnerability in the MySQL Server component in Oracle ...)
 	{DSA-2845-1}
 	- mariadb-5.5 <unfixed>
@@ -6197,9 +6197,9 @@
 	- openjdk-6 <not-affected> (Deployment components not part of OpenJDK, only present in Oracle Java)
 	- openjdk-7 <not-affected> (Deployment components not part of OpenJDK, only present in Oracle Java)
 CVE-2013-5901 (Unspecified vulnerability in the Oracle Identity Manager component in ...)
-	TODO: check
+	NOT-FOR-US: Oracle Fusion Middleware
 CVE-2013-5900 (Unspecified vulnerability in the Oracle Identity Manager component in ...)
-	TODO: check
+	NOT-FOR-US: Oracle Fusion Middleware
 CVE-2013-5899 (Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows ...)
 	- openjdk-6 <not-affected> (Deployment components not part of OpenJDK, only present in Oracle Java)
 	- openjdk-7 <not-affected> (Deployment components not part of OpenJDK, only present in Oracle Java)
@@ -6207,7 +6207,7 @@
 	- openjdk-6 <not-affected> (Deployment components not part of OpenJDK, only present in Oracle Java)
 	- openjdk-7 <not-affected> (Deployment components not part of OpenJDK, only present in Oracle Java)
 CVE-2013-5897 (Unspecified vulnerability in the Oracle Agile Product Lifecycle ...)
-	TODO: check
+	NOT-FOR-US: Oracle Supply Chain Products Suite
 CVE-2013-5896 (Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; ...)
 	- openjdk-6 <unfixed>
 	- openjdk-7 7u51-2.4.4-1
@@ -6227,7 +6227,7 @@
 	- mysql-5.5 <unfixed>
 	- mysql-5.1 <not-affected> (Only affects 5.5 and 5.6)
 CVE-2013-5890 (Unspecified vulnerability in the Oracle Payroll component in Oracle ...)
-	TODO: check
+	NOT-FOR-US: Oracle E-Business Suite
 CVE-2013-5889 (Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows ...)
 	- openjdk-6 <not-affected> (Deployment components not part of OpenJDK, only present in Oracle Java)
 	- openjdk-7 <not-affected> (Deployment components not part of OpenJDK, only present in Oracle Java)
@@ -6238,14 +6238,14 @@
 	- openjdk-6 <not-affected> (Deployment components not part of OpenJDK, only present in Oracle Java)
 	- openjdk-7 <not-affected> (Deployment components not part of OpenJDK, only present in Oracle Java)
 CVE-2013-5886 (Unspecified vulnerability in the PeopleSoft Enterprise HRMS component ...)
-	TODO: check
+	NOT-FOR-US: Oracle PeopleSoft Products
 CVE-2013-5885 (Unspecified vulnerability in Oracle Solaris 11.1 allows local users to ...)
-	TODO: check
+	NOT-FOR-US: Oracle Solaris
 CVE-2013-5884 (Unspecified vulnerability in Oracle Java SE Java SE 5.0u55, 6u65, and ...)
 	- openjdk-6 <unfixed>
 	- openjdk-7 7u51-2.4.4-1
 CVE-2013-5883 (Unspecified vulnerability in Oracle Solaris 8 allows local users to ...)
-	TODO: check
+	NOT-FOR-US: Oracle Solaris
 CVE-2013-5882 (Unspecified vulnerability in the MySQL Server component in Oracle ...)
 	- mysql-5.5 <not-affected> (Only affects Mysql 5.6)
 	- mysql-5.1 <not-affected> (Only affects Mysql 5.6)
@@ -6253,33 +6253,33 @@
 	- mysql-5.5 <not-affected> (Only affects Mysql 5.6)
 	- mysql-5.1 <not-affected> (Only affects Mysql 5.6)
 CVE-2013-5880 (Unspecified vulnerability in the Oracle Demantra Demand Management ...)
-	TODO: check
+	NOT-FOR-US: Oracle Supply Chain Products Suite
 CVE-2013-5879 (Unspecified vulnerability in the Oracle Outside In Technology ...)
-	TODO: check
+	NOT-FOR-US: Oracle Fusion Middleware
 CVE-2013-5878 (Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, and Java SE ...)
 	- openjdk-6 <unfixed>
 	- openjdk-7 7u51-2.4.4-1
 CVE-2013-5877 (Unspecified vulnerability in the Oracle Demantra Demand Management ...)
-	TODO: check
+	NOT-FOR-US: Oracle Supply Chain Products Suite
 CVE-2013-5876 (Unspecified vulnerability in Oracle Solaris 10 and 11.1 allows local ...)
-	TODO: check
+	NOT-FOR-US: Oracle Solaris
 CVE-2013-5875 (Unspecified vulnerability in Oracle Solaris 11.1 allows local users to ...)
-	TODO: check
+	NOT-FOR-US: Oracle Solaris
 CVE-2013-5874 (Unspecified vulnerability in the Oracle Application Object Library ...)
-	TODO: check
+	NOT-FOR-US: Oracle E-Business Suite
 CVE-2013-5873 (Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools ...)
-	TODO: check
+	NOT-FOR-US: Oracle PeopleSoft Products
 CVE-2013-5872 (Unspecified vulnerability in Oracle Solaris 10 and 11.1 allows local ...)
-	TODO: check
+	NOT-FOR-US: Oracle Solaris
 CVE-2013-5871 (Unspecified vulnerability in the Oracle AutoVue Electro-Mechanical ...)
-	TODO: check
+	NOT-FOR-US: Oracle Supply Chain Products
 CVE-2013-5870 (Unspecified vulnerability in Oracle Java SE 7u45 and JavaFX 2.2.45 ...)
 	- openjdk-6 <not-affected> (JavaFX not part of OpenJDK)
 	- openjdk-7 <not-affected> (JavaFX not part of OpenJDK)
 CVE-2013-5869 (Unspecified vulnerability in the Oracle WebCenter Portal component in ...)
-	TODO: check
+	NOT-FOR-US: Oracle Fusion Middleware
 CVE-2013-5868 (Unspecified vulnerability in the Oracle AutoVue Electro-Mechanical ...)
-	TODO: check
+	NOT-FOR-US: Oracle Supply Chain Products
 CVE-2013-5867 (Unspecified vulnerability in the Siebel Core - Server Infrastructure ...)
 	NOT-FOR-US: Oracle Siebel CRM
 CVE-2013-5866 (Unspecified vulnerability in Oracle Solaris 11.1 allows local users to ...)
@@ -6300,7 +6300,7 @@
 CVE-2013-5859 (Unspecified vulnerability in the Instantis EnterpriseTrack component ...)
 	NOT-FOR-US: Oracle Primavera Products Suite
 CVE-2013-5858 (Unspecified vulnerability in the Core RDBMS component in Oracle ...)
-	TODO: check
+	NOT-FOR-US: Oracle Database Server
 CVE-2013-5857 (Unspecified vulnerability in the Oracle Health Sciences InForm ...)
 	NOT-FOR-US: Oracle Industry Applications
 CVE-2013-5856 (Unspecified vulnerability in the Oracle Health Sciences InForm ...)
@@ -6311,7 +6311,7 @@
 	- openjdk-6 <not-affected> (JavaFX not part of OpenJDK)
 	- openjdk-7 <not-affected> (JavaFX not part of OpenJDK)
 CVE-2013-5853 (Unspecified vulnerability in the Core RDBMS component in Oracle ...)
-	TODO: check
+	NOT-FOR-US: Oracle Database Server
 CVE-2013-5852 (Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE ...)
 	- openjdk-6 <not-affected> (Deployment components not part of OpenJDK, only present in Oracle Java)
 	- openjdk-7 <not-affected> (Deployment components not part of OpenJDK, only present in Oracle Java)
@@ -6361,9 +6361,9 @@
 CVE-2013-5835 (Unspecified vulnerability in the Siebel UI Framework component in ...)
 	NOT-FOR-US: Oracle Siebel CRM
 CVE-2013-5834 (Unspecified vulnerability in Oracle Solaris 8 allows local users to ...)
-	TODO: check
+	NOT-FOR-US: Oracle Solaris
 CVE-2013-5833 (Unspecified vulnerability in Oracle Solaris 8 and 9 allows local users ...)
-	TODO: check
+	NOT-FOR-US: Oracle Solaris
 CVE-2013-5832 (Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE ...)
 	- openjdk-6 <not-affected> (Specific to Oracle Java, not present in IcedTea)
 	- openjdk-7 <not-affected> (Specific to Oracle Java, not present in IcedTea)
@@ -6396,7 +6396,7 @@
 CVE-2013-5822 (Unspecified vulnerability in the Oracle iLearning component in Oracle ...)
 	NOT-FOR-US: Oracle iLearning
 CVE-2013-5821 (Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11.1 allows ...)
-	TODO: check
+	NOT-FOR-US: Oracle Solaris
 CVE-2013-5820 (Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE ...)
 	- openjdk-6 6b27-1.12.7-1
 	- openjdk-7 7u45-2.4.3-1
@@ -6430,7 +6430,7 @@
 	- openjdk-6 6b27-1.12.7-1
 	- openjdk-7 7u45-2.4.3-1
 CVE-2013-5808 (Unspecified vulnerability in the Oracle iPlanet Web Proxy Server ...)
-	TODO: check
+	NOT-FOR-US: Oracle Fusion Middleware
 CVE-2013-5807 (Unspecified vulnerability in Oracle MySQL Server 5.5.x through 5.5.32 ...)
 	{DSA-2818-1}
 	- mysql-5.5 5.5.33
@@ -6472,7 +6472,7 @@
 CVE-2013-5796 (Unspecified vulnerability in the Siebel Core - EAI component in Oracle ...)
 	NOT-FOR-US: Oracle Siebel CRM
 CVE-2013-5795 (Unspecified vulnerability in the Oracle Demantra Demand Management ...)
-	TODO: check
+	NOT-FOR-US: Oracle Supply Chain Products Suite
 CVE-2013-5794 (Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools ...)
 	NOT-FOR-US: Oracle PeopleSoft Products
 CVE-2013-5793 (Unspecified vulnerability in Oracle MySQL Server 5.6.12 and earlier ...)
@@ -6500,7 +6500,7 @@
 	- mysql-5.1 <not-affected> (Only affects Mysql 5.6)
 	NOTE: http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html
 CVE-2013-5785 (Unspecified vulnerability in the Oracle Reports Developer component in ...)
-	TODO: check
+	NOT-FOR-US: Oracle Fusion Middleware
 CVE-2013-5784 (Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE ...)
 	- openjdk-6 6b27-1.12.7-1
 	- openjdk-7 7u45-2.4.3-1
@@ -6557,7 +6557,7 @@
 CVE-2013-5765 (Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools ...)
 	NOT-FOR-US: Oracle PeopleSoft Products
 CVE-2013-5764 (Unspecified vulnerability in the Core RDBMS component in Oracle ...)
-	TODO: check
+	NOT-FOR-US: Oracle Database Server
 CVE-2013-5763 (Unspecified vulnerability in the Oracle Outside In Technology ...)
 	NOT-FOR-US: Oracle Fusion Middleware
 CVE-2013-5762 (Unspecified vulnerability in the Oracle Siebel CTMS component in ...)
@@ -11606,7 +11606,7 @@
 CVE-2013-3831 (Unspecified vulnerability in the Oracle Portal component in Oracle ...)
 	NOT-FOR-US: Oracle Fusion Middleware
 CVE-2013-3830 (Unspecified vulnerability in the Hyperion Strategic Finance component ...)
-	TODO: check
+	NOT-FOR-US: Oracle Hyperion
 CVE-2013-3829 (Unspecified vulnerability in the Java SE, Java SE Embedded component ...)
 	- openjdk-6 6b27-1.12.7-1
 	- openjdk-7 7u45-2.4.3-1
@@ -14028,9 +14028,9 @@
 CVE-2013-2828
 	RESERVED
 CVE-2013-2827 (An unspecified ActiveX control in WellinTech KingSCADA before 3.1.2, ...)
-	TODO: check
+	NOT-FOR-US: WellinTech KingSCADA
 CVE-2013-2826 (WellinTech KingSCADA before 3.1.2, KingAlarm&Event before 3.1, and ...)
-	TODO: check
+	NOT-FOR-US: WellinTech KingSCADA
 CVE-2013-2825 (The DNP3 service in the Outstation component on Elecsys Director ...)
 	NOT-FOR-US: Elecsys Director Gateway
 CVE-2013-2824

More information about the Secure-testing-commits mailing list