Secure testing commits - Mar 2009 - r11513 - data/CVE

Author: jmm-guest
Date: 2009-03-31 22:11:00 +0000 (Tue, 31 Mar 2009)
New Revision: 11513

Modified:
   data/CVE/list
Log:
- poked maintainer for puppetmaster
- NFUs
- new cman issue


Modified: data/CVE/list
==================================================================---
data/CVE/list	2009-03-31 21:59:42 UTC (rev 11512)
+++ data/CVE/list	2009-03-31 22:11:00 UTC (rev 11513)
@@ -142,25 +142,26 @@
         NOTE: This seems like a non-issue, since the config file should be
under control
         NOTE: of the admin?
 CVE-2008-6559 (Merge mcd in ReliantHA 1.1.4 in SCO UnixWare 7.1.4 allows local
users ...)
-	TODO: check
+	NOT-FOR-US: SCO UnixWare
 CVE-2008-6558 (Untrusted search path vulnerability in (1) hvdisp and (2) rcvm
in ...)
-	TODO: check
+	NOT-FOR-US: SCO UnixWare
 CVE-2008-6557 (cgi-bin/webutil.pl in The Puppet Master WebUtil 2.7 allows
remote ...)
-	TODO: check
+	TODO: check, whether it''s related to puppetmaster from puppet
 CVE-2008-6556 (cgi-bin/webutil.pl in The Puppet Master WebUtil 2.3 allows
remote ...)
-	TODO: check
+	TODO: check, whether it''s related to puppetmaster from puppet
 CVE-2008-6555 (cgi-bin/webutil.pl in The Puppet Master WebUtil allows remote
...)
-	TODO: check
+	TODO: check, whether it''s related to puppetmaster from puppet
 CVE-2008-6554 (cgi-bin/script in Aztech ADSL2/2+ 4-port router 3.7.0 build
070426 ...)
-	TODO: check
+	NOT-FOR-US: Aztech router
 CVE-2008-6553 (microcms-admin-home.php in Implied by Design Micro CMS
(Micro-CMS) 3.5 ...)
-	TODO: check
+	NOT-FOR-US: Micro CMS
 CVE-2008-6552 (Red Hat Cluster Project 2.x allows local users to modify or
overwrite ...)
-	TODO: check
+	- redhat-cluster <unfixed>
+	TODO: File bug
 CVE-2008-6551 (Multiple directory traversal vulnerabilities in e-Vision CMS
2.0.2 and ...)
-	TODO: check
+	NOT-FOR-US: e-vision CMS
 CVE-2008-6550 (Cross-site scripting (XSS) vulnerability in glossaire.php in
Glossaire ...)
-	TODO: check
+	NOT-FOR-US: Glossaire
 CVE-2008-6549 (The password_checker function in config/multiconfig.py in
MoinMoin ...)
 	TODO: check
 CVE-2008-6548 (The rst parser (parser/text_rst.py) in MoinMoin 1.6.1 does not
check ...)