Secure testing commits - Oct 2007 - r6923 - data/CVE

Author: white
Date: 2007-10-13 05:27:50 +0000 (Sat, 13 Oct 2007)
New Revision: 6923

Modified:
   data/CVE/list
Log:
NFUs; new phpmyadmin issue, patch sent to BTS; new tk8.3 issue, needs
investigation

Modified: data/CVE/list
==================================================================---
data/CVE/list	2007-10-12 21:14:07 UTC (rev 6922)
+++ data/CVE/list	2007-10-13 05:27:50 UTC (rev 6923)
@@ -1,31 +1,31 @@
 CVE-2007-5391 (Unspecified vulnerability in HP Select Identity 4.01 through
4.01.010 ...)
-	TODO: check
+	NOT-FOR-US: HP Select Identity
 CVE-2007-5390 (PHP remote file inclusion vulnerability in index.php in PicoFlat
CMS ...)
-	TODO: check
+	NOT-FOR-US: PicoFlat
 CVE-2007-5389 (** DISPUTED ** ...)
 	TODO: check
 CVE-2007-5388 (Multiple PHP remote file inclusion vulnerabilities in WebDesktop
0.1 ...)
-	TODO: check
+	NOT-FOR-US: WebDesktop
 CVE-2007-5387 (PHP remote file inclusion vulnerability in ...)
-	TODO: check
+	NOT-FOR-US: Pindorama
 CVE-2007-5386 (Cross-site scripting (XSS) vulnerability in scripts/setup.php in
...)
-	TODO: check
+	- phpmyadmin <unfixed> (medium; bug #446451) 
 CVE-2007-5385 (Multiple cross-site scripting (XSS) vulnerabilities in the ...)
-	TODO: check
+	NOT-FOR-US: Thomson/Alcatel SpeedTouch 7G router
 CVE-2007-5384 (Multiple cross-site request forgery (CSRF) vulnerabilities in
the ...)
-	TODO: check
+	NOT-FOR-US: Thomson/Alcatel SpeedTouch 7G router
 CVE-2007-5383 (The Thomson/Alcatel SpeedTouch 7G router, as used for the BT
Home Hub, ...)
-	TODO: check
+	NOT-FOR-US: Thomson/Alcatel SpeedTouch 7G router
 CVE-2007-5382 (The conversion utility for converting CiscoWorks Wireless LAN
Solution ...)
-	TODO: check
+	NOT-FOR-US: CiscoWorks
 CVE-2007-5381 (Stack-based buffer overflow in the Line Printer Daemon (LPD) in
Cisco ...)
-	TODO: check
+	NOT-FOR-US: Line Printer Daemon (LPD) Cisco
 CVE-2007-5380
 	RESERVED
 CVE-2007-5379
 	RESERVED
 CVE-2007-5378 (Buffer overflow in the FileReadGIF function in tkImgGIF.c for Tk
...)
-	TODO: check
+	- tk8.3 <unfixed> (low)
 CVE-2007-5377 (The (1) tramp-make-temp-file and (2) tramp-make-tramp-temp-file
...)
 	TODO: check
 CVE-2007-5376