Secure testing commits - Dec 2008 - r10803 - data/CVE

Author: white
Date: 2008-12-25 22:32:35 +0000 (Thu, 25 Dec 2008)
New Revision: 10803

Modified:
   data/CVE/list
Log:
Some NFUs

Modified: data/CVE/list
==================================================================---
data/CVE/list	2008-12-25 22:12:43 UTC (rev 10802)
+++ data/CVE/list	2008-12-25 22:32:35 UTC (rev 10803)
@@ -9,15 +9,15 @@
 CVE-2008-5712 (The HTML parser in KDE Konqueror 3.5.9 allows remote attackers
to ...)
 	TODO: check
 CVE-2008-5711 (Heap-based buffer overflow in the Facebook PhotoUploader ActiveX
...)
-	TODO: check
+	NOT-FOR-US: Facebook PhotoUploader ActiveX
 CVE-2008-5710 (Multiple unspecified vulnerabilities in the web management
interface ...)
-	TODO: check
+	NOT-FOR-US: Avaya Communication Manager
 CVE-2008-5709 (Multiple unspecified vulnerabilities in the web management
interface ...)
-	TODO: check
+	NOT-FOR-US: Avaya Communication Manager
 CVE-2008-5708 (redirect.php in SlimCMS 1.0.0 does not require authentication,
which ...)
-	TODO: check
+	NOT-FOR-US: SlimCMS
 CVE-2008-5707 (SQL injection vulnerability in urunler.asp in Iltaweb Alisveris
...)
-	TODO: check
+	NOT-FOR-US: Iltaweb Alisveris Sistemi
 CVE-2008-5704 (src/unit_test.c in gpsdrive (aka gpsdrive-scripts) 2.10~pre4
might ...)
 	TODO: check
 CVE-2008-5703 (gpsdrive (aka gpsdrive-scripts) 2.10~pre4 allows local users to
...)
@@ -33,43 +33,43 @@
 CVE-2008-5698 (HTMLTokenizer::scriptHandler in Konqueror in KDE 3.5.9 and
3.5.10 ...)
 	TODO: check
 CVE-2008-5697 (The skype_tool.copy_num method in the Skype extension BETA
2.2.0.95 ...)
-	TODO: check
+	NOT-FOR-US: Skype extension
 CVE-2008-5696 (Novell NetWare 6.5 before Support Pack 8, when an OES2 Linux
server is ...)
-	TODO: check
+	NOT-FOR-US: Novell NetWare
 CVE-2008-5695 (wp-admin/options.php in WordPress MU before 1.3.2, and WordPress
2.3.2 ...)
 	TODO: check
 CVE-2008-5694 (PHP remote file inclusion vulnerability in ...)
 	TODO: check
 CVE-2008-5693 (Ipswitch WS_FTP Server Manager 6.1.0.0 and earlier, and possibly
other ...)
-	TODO: check
+	NOT-FOR-US: Ipswitch WS_FTP Server Manager
 CVE-2008-5692 (Ipswitch WS_FTP Server Manager before 6.1.1, and possibly other
...)
-	TODO: check
+	NOT-FOR-US: Ipswitch WS_FTP Server Manager
 CVE-2008-5691 (Heap-based buffer overflow in the Phoenician Casino FlashAX
ActiveX ...)
-	TODO: check
+	NOT-FOR-US: Phoenician Casino FlashAX ActiveX
 CVE-2008-5690 (The Kerberos credential renewal feature in Solaris 8, 9, and 10,
and ...)
 	TODO: check
 CVE-2008-5689 (tun in IP Tunnel in Solaris 10 and OpenSolaris snv_01 through
snv_76 ...)
-	TODO: check
+	NOT-FOR-US: Solaris
 CVE-2008-5688 (MediaWiki 1.8.1 through 1.13.3, when the wgShowExceptionDetails
...)
 	TODO: check
 CVE-2008-5687 (MediaWiki 1.11 through 1.13.3 does not properly protect against
the ...)
 	TODO: check
 CVE-2008-5686 (IBM Tivoli Provisioning Manager (TPM) before 5.1.1.1 IF0006,
when its ...)
-	TODO: check
+	NOT-FOR-US: IBM Tivoli Provisioning Manager
 CVE-2008-5685 (Sun ScApp firmware 5.18.x, 5.19.x, and 5.20.0 through 5.20.10 on
Sun ...)
-	TODO: check
+	NOT-FOR-US: Sun ScApp firmware
 CVE-2008-5684 (Unspecified vulnerability in the X Inter Client Exchange library
(aka ...)
 	TODO: check
 CVE-2008-5683 (Unspecified vulnerability in Opera before 9.63 allows remote
attackers ...)
-	TODO: check
+	NOT-FOR-US: Opera
 CVE-2008-5682 (Cross-site scripting (XSS) vulnerability in Opera before 9.63
allows ...)
-	TODO: check
+	NOT-FOR-US: Opera
 CVE-2008-5681 (Opera before 9.63 does not block unspecified "scripted
URLs" during ...)
-	TODO: check
+	NOT-FOR-US: Opera
 CVE-2008-5680 (Multiple buffer overflows in Opera before 9.63 might allow (1)
remote ...)
-	TODO: check
+	NOT-FOR-US: Opera
 CVE-2008-5679 (The HTML parsing engine in Opera before 9.63 allows remote
attackers ...)
-	TODO: check
+	NOT-FOR-US: Opera
 CVE-2008-5678 (Fretwell-Downing Informatics (FDI) OLIB7 WebView 2.5.1.1 allows
remote ...)
 	NOT-FOR-US: OLIB7 WebView
 CVE-2008-5677 (Unrestricted file upload vulnerability in Kwalbum 2.0.4, 2.0.2,
and ...)