Secure testing commits - Dec 2007 - r7526 - data/CVE

Author: white
Date: 2007-12-05 22:17:23 +0000 (Wed, 05 Dec 2007)
New Revision: 7526

Modified:
   data/CVE/list
Log:
Some NFUs; qemu not-affected

Modified: data/CVE/list
==================================================================---
data/CVE/list	2007-12-05 22:06:11 UTC (rev 7525)
+++ data/CVE/list	2007-12-05 22:17:23 UTC (rev 7526)
@@ -61,21 +61,21 @@
 CVE-2007-6229 (PHP remote file inclusion vulnerability in ...)
 	NOT-FOR-US: Rayzz
 CVE-2007-6228 (Stack-based buffer overflow in the Helper class in the
yt.ythelper.2 ...)
-	TODO: check
+	NOT-FOR-US: Yahoo! Toolbar
 CVE-2007-6227 (QEMU 0.9.0 allows local users of a Windows XP SP2 guest
operating ...)
-	TODO: check
+	- qemu <not-affected> (Windows issue)
 CVE-2007-6226 (The American Power Conversion (APC) AP7932 0u 30amp Switched
Rack ...)
-	TODO: check
+	NOT-FOR-US: American Power Conversion (APC)
 CVE-2007-6225 (Unspecified vulnerability in Sun Solaris 10, when 64bit mode is
used ...)
-	TODO: check
+	NOT-FOR-US: Sun Solaris 10
 CVE-2007-6224 (The RealNetworks RealAudioObjects.RealAudio ActiveX control in
...)
-	TODO: check
+	NOT-FOR-US: RealAudioObjects.RealAudio ActiveX
 CVE-2007-6223 (SQL injection vulnerability in garage.php in phpBB Garage 1.2.0
Beta3 ...)
-	TODO: check
+	NOT-FOR-US: phpBB Garage
 CVE-2007-6222 (The CheckCustomerAccess function in functions.php in CRM-CTT
...)
-	TODO: check
+	NOT-FOR-US: Interleave
 CVE-2007-6221 (TuMusika Evolution 1.7R5 allows remote attackers to obtain ...)
-	TODO: check
+	NOT-FOR-US: TuMusika
 CVE-2007-6220 (typespeed before 0.6.4 allows remote attackers to cause a denial
of ...)
 	TODO: check
 CVE-2007-6219 (Cross-site scripting (XSS) vulnerability in IBM Tivoli Netcool
...)