Secure testing commits - Aug 2012 - r19965 - in data: CVE DSA

Author: jmm
Date: 2012-08-17 20:48:01 +0000 (Fri, 17 Aug 2012)
New Revision: 19965

Modified:
   data/CVE/list
   data/DSA/list
Log:
NFUs
additional spip issue fixed


Modified: data/CVE/list
==================================================================---
data/CVE/list	2012-08-17 09:14:18 UTC (rev 19964)
+++ data/CVE/list	2012-08-17 20:48:01 UTC (rev 19965)
@@ -3,7 +3,7 @@
 	- phpmyadmin 4:3.4.11.1-1
 	[squeeze] - phpmyadmin <not-affected> (Vulnerable code not present)
 CVE-2012-4344 (Cross-site scripting (XSS) vulnerability in Ipswitch WhatsUp
Gold ...)
-	TODO: check
+	NOT-FOR-US: Ipswitch
 CVE-2012-4343 (Multiple unspecified vulnerabilities in Gallery 3 before 3.0.4
allow ...)
 	TODO: check
 CVE-2012-4342 (Multiple cross-site scripting (XSS) vulnerabilities in Gallery 3
...)
@@ -11,7 +11,7 @@
 CVE-2012-4341 (Multiple stack-based buffer overflows in msg_server.exe in SAP
...)
 	TODO: check
 CVE-2012-4340 (Cross-site scripting (XSS) vulnerability in Sybase EAServer
before 6.1 ...)
-	TODO: check
+	NOT-FOR-US: Sybase
 CVE-2012-4339
 	RESERVED
 CVE-2012-4338
@@ -21,21 +21,21 @@
 CVE-2012-4336
 	RESERVED
 CVE-2012-4335 (Samsung NET-i viewer 1.37.120316 allows remote attackers to
cause a ...)
-	TODO: check
+	NOT-FOR-US: Samsung NET-i
 CVE-2012-4334 (The ConnectDDNS method in the (1) STWConfigNVR 1.1.13.15 and (2)
...)
-	TODO: check
+	NOT-FOR-US: Samsung NET-i
 CVE-2012-4333 (Multiple stack-based buffer overflows in the BackupToAvi method
in the ...)
-	TODO: check
+	NOT-FOR-US: Samsung NET-i
 CVE-2012-4332 (The ShareYourCart plugin 1.7.1 for WordPress allows remote
attackers ...)
-	TODO: check
+	NOT-FOR-US: Wordpress plugin
 CVE-2012-4331 (Multiple unspecified vulnerabilities in SPIP before 1.9.2.o,
2.0.x ...)
-	TODO: check
+	- spip 2.1.13-1
 CVE-2012-4330 (The Samsung D6000 TV and possibly other products allows remote
...)
-	TODO: check
+	NOT-FOR-US: Samsung D6000 TV
 CVE-2012-4329 (The Samsung D6000 TV and possibly other products allow remote
...)
-	TODO: check
+	NOT-FOR-US: Samsung D6000 TV
 CVE-2012-4328 (Unspecified vulnerability in the MAPI in vBulletin Suite 4.1.2
through ...)
-	TODO: check
+	NOT-FOR-US: vBulletin
 CVE-2012-4327 (Unspecified vulnerability in the Image News slider plugin before
3.3 ...)
 	NOT-FOR-US: Image News slider plugin for WordPress
 CVE-2012-4326 (Cross-site request forgery (CSRF) vulnerability in
commonsettings.php ...)

Modified: data/DSA/list
==================================================================---
data/DSA/list	2012-08-17 09:14:18 UTC (rev 19964)
+++ data/DSA/list	2012-08-17 20:48:01 UTC (rev 19965)
@@ -218,7 +218,7 @@
 	[squeeze] - imagemagick 8:6.6.0.4-3+squeeze3
 [26 Apr 2012] DSA-2461-1 spip - several
 	[squeeze] - spip 2.1.1-3squeeze3
-	{CVE-2012-2151}
+	{CVE-2012-2151 CVE-2012-4331}
 [25 Apr 2012] DSA-2460-1 asterisk - several
 	{CVE-2012-1183 CVE-2012-2414 CVE-2012-2415}
 	[squeeze] - asterisk 1:1.6.2.9-2+squeeze5