Secure testing commits - Oct 2008 - r10147 - data/CVE

Author: nion
Date: 2008-10-22 17:19:01 +0000 (Wed, 22 Oct 2008)
New Revision: 10147

Modified:
   data/CVE/list
Log:
NFUs

Modified: data/CVE/list
==================================================================---
data/CVE/list	2008-10-22 17:12:47 UTC (rev 10146)
+++ data/CVE/list	2008-10-22 17:19:01 UTC (rev 10147)
@@ -74,11 +74,11 @@
 CVE-2008-4599 (SQL injection vulnerability in category.php in Mosaic Commerce
allows ...)
 	NOT-FOR-US: Mosaic Commerce
 CVE-2008-4598 (Unspecified vulnerability in Shindig-Integrator 5.x, a module
for ...)
-	TODO: check
+	NOT-FOR-US: Shindig-Integrator module for Drupal
 CVE-2008-4597 (Shindig-Integrator 5.x, a module for Drupal, does not properly
...)
-	TODO: check
+	NOT-FOR-US: Shindig-Integrator module for Drupal
 CVE-2008-4596 (Cross-site scripting (XSS) vulnerability in Shindig-Integrator
5.x, a ...)
-	TODO: check
+	NOT-FOR-US: Shindig-Integrator module for Drupal
 CVE-2008-4595 (Multiple unspecified vulnerabilities in Slaytanic Scripts
Content Plus ...)
 	NOT-FOR-US: Slaytanic Scripts Content Plus
 CVE-2008-4594 (Unspecified vulnerability in the SNMPv3 component in Linksys
WAP4400N ...)
@@ -200,7 +200,6 @@
 	TODO: check
 CVE-2008-4558 (Array index error in VLC media player 0.9.2 allows remote
attackers to ...)
 	- vlc <not-affected> (medium; bug #502314)
-	NOTE: http://www.coresecurity.com/content/vlc-xspf-memory-corruption
 	TODO: only 0.9.0->0.9.2 are affected, check if newer upstream version is
uploaded to unstable
 CVE-2008-4545 (Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and
7.x ...)
 	NOT-FOR-US: Cisco
@@ -300,7 +299,7 @@
 CVE-2008-4478 (Multiple integer overflows in dhost.exe in Novell eDirectory 8.8
...)
 	NOT-FOR-US: Novell eDirectory
 CVE-2008-4473 (Multiple heap-based buffer overflows in Adobe Flash CS3
Professional ...)
-	TODO: check
+	NOT-FOR-US: Flash CS3 Professional
 CVE-2008-4502 (Multiple PHP remote file inclusion vulnerabilities in
DataFeedFile ...)
 	NOT-FOR-US: DataFeedFile PHP Framework API
 CVE-2008-4501 (Directory traversal vulnerability in the FTP server in Serv-U
7.3, and ...)
@@ -468,7 +467,7 @@
 CVE-2008-4413
 	RESERVED
 CVE-2008-4412 (Unspecified vulnerability in HP Systems Insight Manager (SIM)
before ...)
-	TODO: check
+	NOT-FOR-US: HP Systems Insight Manager
 CVE-2008-4411 (Cross-site scripting (XSS) vulnerability in HP System Management
...)
 	NOT-FOR-US: HP System Management Homepage
 CVE-2008-4410 (The vmi_write_ldt_entry function in arch/x86/kernel/vmi_32.c in
the ...)