Secure testing commits - Nov 2007 - r7362 - data/CVE

Author: alec-guest
Date: 2007-11-20 22:18:44 +0000 (Tue, 20 Nov 2007)
New Revision: 7362

Modified:
   data/CVE/list
Log:
NFUs

Modified: data/CVE/list
==================================================================---
data/CVE/list	2007-11-20 21:14:09 UTC (rev 7361)
+++ data/CVE/list	2007-11-20 22:18:44 UTC (rev 7362)
@@ -1,27 +1,27 @@
 CVE-2007-6038 (PHP remote file inclusion vulnerability in xajax_functions.php
in the ...)
 	TODO: check
 CVE-2007-6037 (Cross-site scripting (XSS) vulnerability in
ws/generic_api_call.pl in ...)
-	TODO: check
+	NOT-FOR-US: Citrix NetScaler
 CVE-2007-6036 (The parseRTSPRequestString function in LIVE555 Media Server
2007.11.01 ...)
 	TODO: check
 CVE-2007-6034 (ngIRCd before 0.10.3 allows remote attackers to cause a denial
of ...)
 	TODO: check
 CVE-2007-6033 (Invensys Wonderware InTouch 8.0 creates a NetDDE share with
insecure ...)
-	TODO: check
+	NOT-FOR-US: Invensys Wonderware InTouch
 CVE-2007-6032 (SQL injection vulnerability in calendar/page.asp in Aleris Web
...)
-	TODO: check
+	NOT-FOR-US: Aleris Web Publishing Server
 CVE-2007-6031 (Unspecified vulnerability in VanDyke VShell 3.0.1 allows remote
...)
-	TODO: check
+	NOT-FOR-US: VanDyke VShell
 CVE-2007-6030 (Unspecified vulnerability in Weird Solutions BOOTPTurbo 1.2 has
...)
-	TODO: check
+	NOT-FOR-US: Weird Solutions BOOTPTurbo
 CVE-2007-6029 (Unspecified vulnerability in ClamAV 0.91.1 and 0.91.2 allows
remote ...)
 	TODO: check
 CVE-2007-6028 (Multiple stack-based buffer overflows in the
VSFlexGrid.VSFlexGridL ...)
-	TODO: check
+	NOT-FOR-US: ComponentOne FlexGrid
 CVE-2007-6027 (PHP remote file inclusion vulnerability in admin.jjgallery.php
in the ...)
 	TODO: check
 CVE-2007-6026 (Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0
(aka ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Jet Engine
 CVE-2007-6025 (Stack-based buffer overflow in driver_wext.c in wpa_supplicant
0.6.0 ...)
 	TODO: check
 CVE-2007-6024
@@ -49,7 +49,7 @@
 CVE-2007-6013 (Wordpress 1.5 to 2.3.1 uses cookie values based on the MD5 hash
of a ...)
 	TODO: check
 CVE-2007-6012 (SQL injection vulnerability in SearchR.asp in DocuSafe 4.1.0
allows ...)
-	TODO: check
+	NOT-FOR-US: DocuSafe
 CVE-2004-2757 (Cross-site scripting (XSS) vulnerability in the failed login
page in ...)
 	TODO: check
 CVE-2004-2756 (Cross-site scripting (XSS) vulnerability in viewtopic.php in
Xoops ...)