Secure testing commits - Feb 2009 - r11145 - data/CVE

Author: white
Date: 2009-02-04 23:02:41 +0000 (Wed, 04 Feb 2009)
New Revision: 11145

Modified:
   data/CVE/list
Log:
NFUs; drupalX not affected

Modified: data/CVE/list
==================================================================---
data/CVE/list	2009-02-04 22:53:00 UTC (rev 11144)
+++ data/CVE/list	2009-02-04 23:02:41 UTC (rev 11145)
@@ -66,7 +66,8 @@
 CVE-2009-0383 (delete.php in Max.Blog 1.0.6 does not properly restrict access,
which ...)
 	NOT-FOR-US: Max.Blog
 CVE-2009-0382 (Unspecified vulnerability in Internationalization (i18n)
Translation ...)
-	TODO: check
+	- drupal5 <not-affected> (Translation module not packaged)
+	- drupal6 <not-affected> (Issue only affects the 5.x branch)
 CVE-2009-0381 (SQL injection vulnerability in the BazaarBuilder Ecommerce
Shopping ...)
 	NOT-FOR-US: BazaarBuilder Ecommerce Shopping Cart
 CVE-2009-0380 (** DISPUTED ** ...)
@@ -136,7 +137,7 @@
 CVE-2008-6025 (Directory traversal vulnerability in scr/form.php in openElec
3.01 and ...)
 	NOT-FOR-US: openElec
 CVE-2008-6024 (Unspecified vulnerability in the NFSv4 client module in the
kernel on ...)
-	TODO: check
+	NOT-FOR-US: Sun Solaris
 CVE-2008-6023 (PHP remote file inclusion vulnerability in ...)
 	NOT-FOR-US: Xnova
 CVE-2008-6022 (PHP remote file inclusion vulnerability in ...)
@@ -144,7 +145,7 @@
 CVE-2008-6021 (Multiple unspecified vulnerabilities in Attachmate Reflection
for ...)
 	NOT-FOR-US: Attachmate Reflection
 CVE-2008-6020 (SQL injection vulnerability in the Views module 6.x before
6.x-2.2 for ...)
-	TODO: check
+	NOT-FOR-US: View module (drupal module)
 CVE-2008-6019 (SQL injection vulnerability in index.php in EACOMM DO-CMS 3.0
allows ...)
 	NOT-FOR-US: EACOMM DO-CMS
 CVE-2008-6018 (Directory traversal vulnerability in index.php in MyPHPSite,
when ...)