[Secure-testing-commits] r49758 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-03-18 09:39:03 +0000 (Sat, 18 Mar 2017)
New Revision: 49758

Modified:
   data/CVE/list
Log:
Triage some issues, all NFUs in Cisco products plus one in Chef Manage

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-03-18 09:21:11 UTC (rev 49757)
+++ data/CVE/list	2017-03-18 09:39:03 UTC (rev 49758)
@@ -3,7 +3,7 @@
 CVE-2017-7175
 	RESERVED
 CVE-2017-7174 (The user-account creation feature in Chef Manage 2.1.0 through 2.4.4 ...)
-	TODO: check
+	NOT-FOR-US: Chef Manage
 CVE-2017-7173
 	RESERVED
 CVE-2017-7172
@@ -8734,37 +8734,37 @@
 CVE-2017-3882
 	RESERVED
 CVE-2017-3881 (A vulnerability in the Cisco Cluster Management Protocol (CMP) ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2017-3880 (An Authentication Bypass vulnerability in Cisco WebEx Meetings Server ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2017-3879 (A Denial of Service vulnerability in the remote login functionality for ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2017-3878 (A Denial of Service vulnerability in the Telnet remote login ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2017-3877 (A vulnerability in the web framework of Cisco Unified Communications ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2017-3876
 	RESERVED
 CVE-2017-3875 (An Access-Control Filtering Mechanisms Bypass vulnerability in certain ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2017-3874 (A vulnerability in the web framework of Cisco Unified Communications ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2017-3873
 	RESERVED
 CVE-2017-3872 (A cross-site scripting (XSS) filter bypass vulnerability in the ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2017-3871 (A RADIUS Secret Disclosure vulnerability in the web network management ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2017-3870 (A vulnerability in the URL filtering feature of Cisco AsyncOS Software ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2017-3869 (An API Credentials Management vulnerability in the APIs for Cisco Prime ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2017-3868 (A vulnerability in the web-based management interface of Cisco UCS ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2017-3867 (A vulnerability in the Border Gateway Protocol (BGP) Bidirectional ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2017-3866 (A vulnerability in the web framework code of Cisco Prime Service ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2017-3865
 	RESERVED
 CVE-2017-3864
@@ -8858,7 +8858,7 @@
 CVE-2017-3820 (A vulnerability in Simple Network Management Protocol (SNMP) functions ...)
 	NOT-FOR-US: Cisco IOS XE
 CVE-2017-3819 (A privilege escalation vulnerability in the Secure Shell (SSH) ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2017-3818 (A vulnerability in the Multipurpose Internet Mail Extensions (MIME) ...)
 	NOT-FOR-US: Cisco Email Security Appliances
 CVE-2017-3817
@@ -8866,7 +8866,7 @@
 CVE-2017-3816
 	RESERVED
 CVE-2017-3815 (An API Privilege vulnerability in Cisco TelePresence Server Software ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2017-3814 (A vulnerability in Cisco Firepower System Software could allow an ...)
 	NOT-FOR-US: Cisco Firepower System Software
 CVE-2017-3813 (A vulnerability in the Start Before Logon (SBL) module of Cisco ...)
@@ -8874,7 +8874,7 @@
 CVE-2017-3812 (A vulnerability in the implementation of Common Industrial Protocol ...)
 	NOT-FOR-US:  Cisco Industrial Ethernet 2000 Series Switches
 CVE-2017-3811 (An XML External Entity vulnerability in Cisco WebEx Meetings Server ...)
-	TODO: check
+	NOT-FOR-US: Cisco
 CVE-2017-3810 (A vulnerability in the web framework of Cisco Prime Service Catalog ...)
 	NOT-FOR-US: Cisco Prime Service Catalog
 CVE-2017-3809 (A vulnerability in the Policy deployment module of the Cisco Firepower ...)