Secure testing commits - May 2009 - r11996 - data/CVE

Author: derevko-guest
Date: 2009-05-30 14:08:11 +0000 (Sat, 30 May 2009)
New Revision: 11996

Modified:
   data/CVE/list
Log:
NFUs


Modified: data/CVE/list
==================================================================---
data/CVE/list	2009-05-30 05:32:53 UTC (rev 11995)
+++ data/CVE/list	2009-05-30 14:08:11 UTC (rev 11996)
@@ -1,29 +1,29 @@
 CVE-2009-1808 (Microsoft Windows XP SP3 allows local users to cause a denial of
...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2009-1807 (Unspecified vulnerability in Config.dll in Baofeng products
3.09.04.17 ...)
-	TODO: check
+	NOT-FOR-US: Baofeng
 CVE-2009-1806 (Unspecified vulnerability in IBM Hardware Management Console
(HMC) 7 ...)
-	TODO: check
+	NOT-FOR-US: IBM Hardware Management Console
 CVE-2009-1805
 	RESERVED
 CVE-2009-1804 (Multiple SQL injection vulnerabilities in admin/index.php in
...)
-	TODO: check
+	NOT-FOR-US: videoscript
 CVE-2009-1803 (FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x
versions, ...)
-	TODO: check
+	NOT-FOR-US: FreePBX
 CVE-2009-1802 (Multiple cross-site request forgery (CSRF) vulnerabilities in
FreePBX ...)
-	TODO: check
+	NOT-FOR-US: FreePBX
 CVE-2009-1801 (Multiple cross-site scripting (XSS) vulnerabilities in FreePBX
2.5.1, ...)
-	TODO: check
+	NOT-FOR-US: FreePBX
 CVE-2009-1800 (Stack-based buffer overflow in the Chinagames CGAgent ActiveX
control ...)
-	TODO: check
+	NOT-FOR-US: Chinagames
 CVE-2009-1799 (Multiple SQL injection vulnerabilities in the getGalleryImage
function ...)
-	TODO: check
+	NOT-FOR-US: ST-Gallery
 CVE-2008-6816 (Eaton MGEOPS Network Shutdown Module before 3.10 Build 13 allows
...)
-	TODO: check
+	NOT-FOR-US: Eaton
 CVE-2008-6815 (mykdownload.php in MyKtools 2.4 does not require administrative
...)
-	TODO: check
+	NOT-FOR-US: MyKtools
 CVE-2008-6814 (Unrestricted file upload vulnerability in image_upload.php in
the ...)
-	TODO: check
+	NOT-FOR-US: SimpleBoard for Mambo
 CVE-2009-XXXX [cacti: xss vulnerability]
 	- cacti 0.8.7b-1 (low; bug #530919)
 	NOTE: cve id requested, but seems to be in limbo; see bug report for
discussion