Author: stef-guest Date: 2006-08-09 17:17:11 +0000 (Wed, 09 Aug 2006) New Revision: 4539 Modified: data/CVE/list Log: some more NFUs Modified: data/CVE/list ==================================================================--- data/CVE/list 2006-08-09 17:00:33 UTC (rev 4538) +++ data/CVE/list 2006-08-09 17:17:11 UTC (rev 4539) @@ -20,7 +20,7 @@ CVE-2006-4018 (Heap-based buffer overflow in the pefromupx function in Clam AntiVirus ...) - clamav 0.88.4-1 (high; bug #382004; bug #382007) CVE-2006-4017 (Cross-site scripting (XSS) vulnerability in the search module in Inter ...) - TODO: check + NOT-FOR-US: Inter Network Marketing (INM) CMS G3 CVE-2006-4016 (Cross-site scripting (XSS) vulnerability in /toendaCMS in toendaCMS ...) NOT-FOR-US: toendaCMS CVE-2006-4015 (Hewlett-Packard (HP) ProCurve 3500yl, 6200yl, and 5400zl switches with ...) @@ -636,23 +636,23 @@ CVE-2006-3757 (index.php in Zen Cart 1.3.0.2 allows remote attackers to obtain ...) NOT-FOR-US: Zen Cart CVE-2006-3756 (Cross-site scripting (XSS) vulnerability in Geeklog 1.4.0sr4 and ...) - TODO: check + NOT-FOR-US: Geeklog CVE-2006-3755 (PHP remote file inclusion vulnerability in ...) - TODO: check + NOT-FOR-US: FlushCMS CVE-2006-3754 (PHP remote file inclusion vulnerability in ...) - TODO: check + NOT-FOR-US: FlushCMS CVE-2006-3753 (setcookie.php for tthe administration login in Professional Home Page ...) - TODO: check + NOT-FOR-US: Professional Home Page Tools Guestbook CVE-2006-3752 (Multiple SQL injection vulnerabilities in class.php in Professional ...) - TODO: check + NOT-FOR-US: Professional Home Page Tools Guestbook CVE-2006-3751 (PHP remote file inclusion vulnerability in ...) - TODO: check + NOT-FOR-US: HTMLArea3 CVE-2006-3750 (PHP remote file inclusion vulnerability in server.php in the Hashcash ...) - TODO: check + NOT-FOR-US: Hashcash Component (com_hashcash) for Joomla CVE-2006-3749 (PHP remote file inclusion vulnerability in sitemap.xml.php in Sitemap ...) - TODO: check + NOT-FOR-US: Sitemap component (com_sitemap) for Mambo CVE-2006-3748 (PHP remote file inclusion vulnerability in ...) - TODO: check + NOT-FOR-US: LoudMouth Component for Mambo CVE-2006-3747 (Off-by-one error in the the ldap scheme handling in the Rewrite module ...) {DSA-1132-1 DSA-1131-1} - apache <unfixed> (medium; bug #380231) @@ -813,7 +813,7 @@ CVE-2006-3679 (FatWire Content Server 5.5.0 allows remote attackers to bypass access ...) NOT-FOR-US: FatWire Content Server CVE-2006-3678 (TippingPoint IPS running the TippingPoint Operating System (TOS) ...) - TODO: check + NOT-FOR-US: TippingPoint CVE-2006-3677 (Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows ...) NOTE: MFSA-2006-45 - mozilla <not-affected> (mozilla 1.7 not affected) @@ -823,7 +823,7 @@ - thunderbird <not-affected> - mozilla-thunderbird <not-affected> CVE-2006-3676 (admin/gallery_admin.php in planetGallery before 14.07.2006 allows remote ...) - TODO: check + NOT-FOR-US: planetGallery CVE-2006-3675 (Password Safe 2.11, 2.16 and 3.0BETA1 does not respect the ...) TODO: check CVE-2006-3674 (nNetObject.cpp in Armagetron Advanced 2.8.2 and earlier allows remote ...) @@ -880,9 +880,9 @@ CVE-2006-3650 RESERVED CVE-2006-3649 (Buffer overflow in Microsoft Visual Basic for Applications (VBA) SDK ...) - TODO: check + NOT-FOR-US: Microsoft CVE-2006-3648 (Unspecified vulnerability in Microsoft Windows 2000 SP4, XP SP1 and ...) - TODO: check + NOT-FOR-US: Microsoft CVE-2006-3647 RESERVED CVE-2006-3646 @@ -892,7 +892,7 @@ CVE-2006-3644 RESERVED CVE-2006-3643 (Cross-site scripting (XSS) vulnerability in Internet Explorer 5.01 and ...) - TODO: check + NOT-FOR-US: Microsoft CVE-2006-3642 RESERVED CVE-2006-3641 @@ -19213,7 +19213,7 @@ CVE-2005-1727 (Apple Mac OS X 10.4.x up to 10.4.1 sets insecure world- and ...) NOT-FOR-US: Apple CVE-2005-1726 (The CoreGraphics Window Server in Mac OS X 10.4.1 allows local users ...) - TODO: check + NOT-FOR-US: Apple CVE-2005-1725 (launchd 106 in Apple Mac OS X 10.4.x up to 10.4.1 allows local users ...) NOT-FOR-US: Apple CVE-2005-1724 (NFS on Apple Mac OS X 10.4.x up to 10.4.1 does not properly obey the ...)