[Secure-testing-commits] r5137 - data/CVE

Stefan Fritsch
Sun, 17 Dec 2006 18:32:51 -0000

Author: stef-guest
Date: 2006-12-17 18:32:48 +0100 (Sun, 17 Dec 2006)
New Revision: 5137

Modified:
   data/CVE/list
Log:
some NFUs

Modified: data/CVE/list
==================================================================---
data/CVE/list	2006-12-17 16:09:49 UTC (rev 5136)
+++ data/CVE/list	2006-12-17 17:32:48 UTC (rev 5137)
@@ -5,21 +5,21 @@
 CVE-2006-XXXX [tdiary arbitrary code execution]
 	- tdiary 2.1.4-6 (bug #403345; medium)
 CVE-2006-6573 (Unspecified vulnerability in Citrix Access Gateway 4.5 Advanced
...)
-	TODO: check
+	NOT-FOR-US: Citrix
 CVE-2006-6572 (Unspecified vulnerability in Citrix Advanced Access Control
(AAC) ...)
-	TODO: check
+	NOT-FOR-US: Citrix
 CVE-2006-6571 (Multiple cross-site scripting (XSS) vulnerabilities in form.php
in ...)
-	TODO: check
+	NOT-FOR-US: GenesisTrader
 CVE-2006-6570 (Unrestricted file upload vulnerability in upload.php in
GenesisTrader ...)
-	TODO: check
+	NOT-FOR-US: GenesisTrader
 CVE-2006-6569 (form.php in GenesisTrader 1.0 allows remote attackers to read
source ...)
-	TODO: check
+	NOT-FOR-US: GenesisTrader
 CVE-2006-6568 (Directory traversal vulnerability in includes/kb_constants.php
in the ...)
-	TODO: check
+	NOT-FOR-US: Knowledge Base (mx_kb) 2.0.2 module for mxBB
 CVE-2006-6567 (PHP remote file inclusion vulnerability in
includes/kb_constants.php ...)
-	TODO: check
+	NOT-FOR-US: Knowledge Base (mx_kb) 2.0.2 module for mxBB
 CVE-2006-6566 (PHP remote file inclusion vulnerability in ...)
-	TODO: check
+	NOT-FOR-US: Profile Control Panel (CPanel) module for mxBB
 CVE-2006-6565 (FileZilla Server before 0.9.22 allows remote attackers to cause
a ...)
 	TODO: check
 CVE-2006-6564 (FileZilla Server before 0.9.22 allows remote attackers to cause
a ...)
@@ -30,66 +30,66 @@
 CVE-2006-6562
 	RESERVED
 CVE-2006-6561 (Unspecified vulnerability in Microsoft Word allows user-assisted
...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2006-6560 (PHP remote file inclusion vulnerability in includes/common.php
in the ...)
-	TODO: check
+	NOT-FOR-US: mx_modsdb 1.0.0 module for MxBBmx_modsdb 1.0.0 module for MxBB
 CVE-2006-6559 (SQL injection vulnerability in ProductDetails.asp in Lotfian
Request ...)
-	TODO: check
+	NOT-FOR-US: Lotfian Request For Travel
 CVE-2006-6558 (Crob FTP Server 3.6.1 b.263 allows remote attackers to cause a
denial ...)
-	TODO: check
+	NOT-FOR-US: Crob FTP Server
 CVE-2006-6557 (Multiple unspecified vulnerabilities in Skulls! before 0.2.6
have ...)
-	TODO: check
+	NOT-FOR-US: Skulls!
 CVE-2006-6556 (The eyeHome function in apps/eyeHome.eyeapp/aplic.php in EyeOS
before ...)
-	TODO: check
+	NOT-FOR-US: EyeOS
 CVE-2006-6555 (Multiple SQL injection vulnerabilities in EasyFill before 0.5.1
allow ...)
-	TODO: check
+	NOT-FOR-US: EasyFill
 CVE-2006-6554 (Unspecified vulnerability in Kerio MailServer before 6.3.1
allows ...)
-	TODO: check
+	NOT-FOR-US: Kerio MailServer
 CVE-2006-6553 (PHP remote file inclusion vulnerability in ...)
-	TODO: check
+	NOT-FOR-US: NewsSuite 1.03 module for mxBB
 CVE-2006-6552 (PHP remote file inclusion vulnerability in ...)
-	TODO: check
+	NOT-FOR-US: BLOG:CMS
 CVE-2006-6551 (PHP remote file inclusion vulnerability in ...)
-	TODO: check
+	NOT-FOR-US: Tucows Client Code Suite (CCS)
 CVE-2006-6550 (** DISPUTED ** ...)
-	TODO: check
+	NOT-FOR-US: Phorum
 CVE-2006-6549 (** DISPUTED ** ...)
-	TODO: check
+	NOT-FOR-US: Rad Upload
 CVE-2006-6548 (Multiple cross-site scripting (XSS) vulnerabilities in cPanel
WebHost ...)
-	TODO: check
+	NOT-FOR-US: cPanel WebHost Manager
 CVE-2006-6547 (Buffer overflow in the readAA function in read_aa.cpp in Winamp
iPod ...)
-	TODO: check
+	NOT-FOR-US: Winamp
 CVE-2006-6546 (PHP remote file inclusion vulnerability in inc/shows.inc.php in
...)
-	TODO: check
+	NOT-FOR-US: cutenews
 CVE-2006-6545 (PHP remote file inclusion vulnerability in includes/common.php
in the ...)
-	TODO: check
+	NOT-FOR-US: ErrorDocs 1.0.0 and earlier module for mxBB
 CVE-2006-6544 (Cross-site scripting (XSS) vulnerability in CM68 News allows
remote ...)
-	TODO: check
+	NOT-FOR-US: CM68 News
 CVE-2006-6543 (Multiple SQL injection vulnerabilities in login.asp in
AppIntellect ...)
-	TODO: check
+	NOT-FOR-US: AppIntellect SpotLight CRM
 CVE-2006-6542 (SQL injection vulnerability in news.php in Fantastic News 2.1.4
and ...)
-	TODO: check
+	NOT-FOR-US: Fantastic News
 CVE-2006-6541 (PHP remote file inclusion vulnerability in signer/final.php in
...)
-	TODO: check
+	NOT-FOR-US: Animated Smiley Generator
 CVE-2006-6540 (SQL injection vulnerability in bt-trackback.php in Bluetrait
before ...)
-	TODO: check
+	NOT-FOR-US: Bluetrait
 CVE-2006-6539 (Multiple buffer overflows in Winamp Web Interface (Wawi) 7.5.13
and ...)
-	TODO: check
+	NOT-FOR-US: Winamp Web Interface
 CVE-2006-6538 (D-LINK DWL-2000AP+ firmware 2.11 allows remote attackers to
cause (1) ...)
-	TODO: check
+	NOT-FOR-US: D-LINK
 CVE-2006-6537 (IBM WebSphere Host On-Demand 6.0, 7.0, 8.0, 9.0, and possibly
10, ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2006-6536 (Cross-site scripting (XSS) vulnerability in hata.asp in Cilem
Haber ...)
-	TODO: check
+	NOT-FOR-US: Cilem Haber Free Edition
 CVE-2006-6535 [dev_queue_xmit DoS]
 	RESERVED
 	- linux-2.6 <not-affected> (Fixed before upload into the archive;
2.6.10)
 CVE-2006-6534 (Multiple cross-site scripting (XSS) vulnerabilities in
osCommerce ...)
-	TODO: check
+	NOT-FOR-US: osCommerce
 CVE-2006-6533 (Directory traversal vulnerability in
admin/templates_boxes_layout.php ...)
-	TODO: check
+	NOT-FOR-US: osCommerce
 CVE-2006-6532 (Multiple cross-site scripting (XSS) vulnerabilities in Vt-Forum
Lite ...)
-	TODO: check
+	NOT-FOR-US: Vt-Forum Lite
 CVE-2006-6531 (Cross-site scripting (XSS) vulnerability in the Help Tip module
before ...)
 	TODO: check
 CVE-2006-6530 (SQL injection vulnerability in the Help Tip module before
4.7.x-1.0 ...)
@@ -99,15 +99,15 @@
 CVE-2006-6528 (The Chatroom Module before 4.7.x.-1.0 for Drupal broadcasts
Chatroom ...)
 	TODO: check
 CVE-2006-6527 (PHP remote file inclusion vulnerability in guest.php in Gizzar
...)
-	TODO: check
+	NOT-FOR-US: Gizzar
 CVE-2006-6526 (PHP remote file inclusion vulnerability in index.php in Gizzar
...)
-	TODO: check
+	NOT-FOR-US: Gizzar
 CVE-2006-6525 (SQL injection vulnerability in vdateUsr.asp in EzHRS HR Assist
1.05 ...)
-	TODO: check
+	NOT-FOR-US: EzHRS HR Assist
 CVE-2006-6524 (SQL injection vulnerability in vdateUsr.asp in EzHRS HR Assist
1.05 ...)
-	TODO: check
+	NOT-FOR-US: EzHRS HR Assist
 CVE-2006-6523 (Cross-site scripting (XSS) vulnerability in mail/manage.html in
...)
-	TODO: check
+	NOT-FOR-US: BoxTrapper in cPanel
 CVE-2006-6522 (Multiple cross-site scripting (XSS) vulnerabilities in
WikiTimeScale ...)
 	TODO: check
 CVE-2006-6521 (SQL injection vulnerability in lire-avis.php in
Messageriescripthp 2.0 ...)