Secure testing commits - Feb 2009 - r11243 - data/CVE

Author: jamie-guest
Date: 2009-02-19 22:33:33 +0000 (Thu, 19 Feb 2009)
New Revision: 11243

Modified:
   data/CVE/list
Log:
NFUs

Modified: data/CVE/list
==================================================================---
data/CVE/list	2009-02-19 21:14:11 UTC (rev 11242)
+++ data/CVE/list	2009-02-19 22:33:33 UTC (rev 11243)
@@ -1,9 +1,9 @@
 CVE-2009-0646 (Multiple SQL injection vulnerabilities in 4Site CMS 2.6 and
earlier ...)
-	TODO: check
+	NOT-FOR-US: 4Site CMS
 CVE-2009-0645 (Directory traversal vulnerability in index.php in Jaws 0.8.8
allows ...)
-	TODO: check
+	NOT-FOR-US: Jaws
 CVE-2009-0644 (The HTTP interface in Swann DVR4-SecuraNet has a certain default
...)
-	TODO: check
+	NOT-FOR-US: Swann DVR4-SecuraNet
 CVE-2009-0643 (Static code injection vulnerability in post.php in Simple PHP
News 1.0 ...)
 	TODO: check
 CVE-2009-0642 (ext/openssl/ossl_ocsp.c in Ruby 1.8 and 1.9 does not properly
check ...)
@@ -13,11 +13,11 @@
 CVE-2009-0640 (Directory traversal vulnerability in the administrative web
server in ...)
 	TODO: check
 CVE-2009-0639 (PHP remote file inclusion vulnerability in
moduli/libri/index.php in ...)
-	TODO: check
+	NOT-FOR-US: phpyabs
 CVE-2008-6166 (SQL injection vulnerability in the KBase (com_kbase) 1.2
component for ...)
-	TODO: check
+	NOT-FOR-US: Joomla!
 CVE-2008-6165 (SQL injection vulnerability in gestion.php in CSPartner 0.1,
when ...)
-	TODO: check
+	NOT-FOR-US: CSPartner
 CVE-2008-6164 (Cross-site scripting (XSS) vulnerability in index.php in
DreamCost ...)
 	TODO: check
 CVE-2008-6163 (SQL injection vulnerability in www/delivery/ac.php in OpenX
2.6.1 ...)
@@ -25,11 +25,11 @@
 CVE-2008-6162 (Bux.to Clone script allows remote attackers to bypass
authentication ...)
 	TODO: check
 CVE-2008-6161 (Cross-site scripting (XSS) vulnerability in WOW Raid Manager
(WRM) ...)
-	TODO: check
+	NOT-FOR-US: WOW Raid Manager
 CVE-2008-6160 (Semantically-Interconnected Online Communities (SIOC) 5.x before
...)
-	TODO: check
+	NOT-FOR-US: Semantically-Interconnected Online Communities
 CVE-2008-6159 (Content Management Made Easy (CMME) 1.19 allows remote attackers
to ...)
-	TODO: check
+	NOT-FOR-US: Content Management Made Easy
 CVE-2005-4878 (Multiple cross-site scripting (XSS) vulnerabilities in (1) ...)
 	TODO: check
 CVE-2009-0638
@@ -198,7 +198,7 @@
 CVE-2009-0577
 	RESERVED
 CVE-2009-0576 (Unspecified vulnerability in Sun Java System Directory Server
5.2 p6 ...)
-	TODO: check
+	NOT-FOR-US: Sun Java System Directory Server
 CVE-2009-0575 (Cross-site scripting (XSS) vulnerability in the ...)
 	NOT-FOR-US: Views Bulk Operations
 CVE-2009-0574 (SQL injection vulnerability in index.php in Easy CafeEngine
allows ...)
@@ -415,7 +415,7 @@
 CVE-2009-0505
 	RESERVED
 CVE-2009-0504 (WSPolicy in the Web Services component in IBM WebSphere
Application ...)
-	TODO: check
+	NOT-FOR-US: IBM WebSphere Application Server
 CVE-2009-0503 (IBM WebSphere Message Broker 6.1.x before 6.1.0.2 writes a
database ...)
 	NOT-FOR-US: IBM WebSphere
 CVE-2008-6110 (Unspecified vulnerability in SemanticScuttle before 0.90 has
unknown ...)
@@ -5884,7 +5884,7 @@
 CVE-2008-4286
 	RESERVED
 CVE-2008-4285 (Unspecified vulnerability in the Performance Monitoring
Infrastructure ...)
-	TODO: check
+	NOT-FOR-US: IBM WebSphere Application Server
 CVE-2008-4284 (Open redirect vulnerability in the ibm_security_logout servlet
in IBM ...)
 	NOT-FOR-US: IBM WebSphere Application Server
 CVE-2008-4283 (CRLF injection vulnerability in the WebContainer component in
IBM ...)