Secure testing commits - Mar 2009 - r11384 - data/CVE

Author: nion
Date: 2009-03-13 11:19:18 +0000 (Fri, 13 Mar 2009)
New Revision: 11384

Modified:
   data/CVE/list
Log:
- NFUs
- CVE-2009-0871 doesn''t affect asterisk in Debian


Modified: data/CVE/list
==================================================================---
data/CVE/list	2009-03-12 21:14:12 UTC (rev 11383)
+++ data/CVE/list	2009-03-13 11:19:18 UTC (rev 11384)
@@ -1,31 +1,31 @@
 CVE-2009-0873 (The NFS daemon (aka nfsd) in Sun Solaris 10 and OpenSolaris
before ...)
-	TODO: check
+	NOT-FOR-US: Solaris
 CVE-2009-0872 (The NFS server in Sun Solaris 10, and OpenSolaris before
snv_111, does ...)
-	TODO: check
+	NOT-FOR-US: Solaris
 CVE-2009-0871 (The SIP channel driver in Asterisk Open Source 1.4.22, 1.4.23,
and ...)
-	TODO: check
+	- asterisk <not-affected> (Vulnerable code introduced in 1.4.22)
 CVE-2009-0870 (The NFSv4 Server module in the kernel in Sun Solaris 10, and
...)
-	TODO: check
+	NOT-FOR-US: Solaris
 CVE-2009-0869 (Buffer overflow in the client in IBM Tivoli Storage Manager
(TSM) HSM ...)
-	TODO: check
+	NOT-FOR-US: IBM Tivoli Storage Manager
 CVE-2009-0868 (CRLF injection vulnerability in the WebLink template in Fujitsu
...)
-	TODO: check
+	NOT-FOR-US: Fujitsu Jasmine2000 Enterprise Edition
 CVE-2009-0867 (The HRM-S service in Fujitsu Enhanced Support Facility 3.0 and
3.0.1 ...)
-	TODO: check
+	NOT-FOR-US: Fujitsu Enhanced Support Facility
 CVE-2009-0866 (pHNews Alpha 1 stores sensitive information under the web root
with ...)
-	TODO: check
+	NOT-FOR-US: pHNews
 CVE-2009-0865 (Directory traversal vulnerability in the SnapShotToFile method
in the ...)
-	TODO: check
+	NOT-FOR-US: GeoVision
 CVE-2009-0864 (S-Cms 1.1 Stable allows remote attackers to bypass
authentication and ...)
-	TODO: check
+	NOT-FOR-US: S-Cms
 CVE-2009-0863 (SQL injection vulnerability in admin/delete_page.php in S-Cms
1.1 ...)
-	TODO: check
+	NOT-FOR-US: S-Cms
 CVE-2009-0862 (Cross-site scripting (XSS) vulnerability in the ...)
-	TODO: check
+	NOT-FOR-US: TangoCMS
 CVE-2009-0861 (Cross-site scripting (XSS) vulnerability in phpDenora before
1.2.3 ...)
-	TODO: check
+	NOT-FOR-US: phpDenora
 CVE-2009-0860 (Cross-site scripting (XSS) vulnerability in the web user
interface in ...)
-	TODO: check
+	NOT-FOR-US: NetMRI
 CVE-2009-0859 (The shm_get_stat function in ipc/shm.c in the shm subsystem in
the ...)
 	TODO: check
 CVE-2009-0858 (The response_addname function in response.c in Daniel J.
Bernstein ...)