Secure testing commits - Aug 2007 - r6218 - data/CVE

Author: stef-guest
Date: 2007-08-02 21:47:47 +0000 (Thu, 02 Aug 2007)
New Revision: 6218

Modified:
   data/CVE/list
Log:
new mysql issues; NFUs

Modified: data/CVE/list
==================================================================---
data/CVE/list	2007-08-02 21:39:37 UTC (rev 6217)
+++ data/CVE/list	2007-08-02 21:47:47 UTC (rev 6218)
@@ -698,17 +698,20 @@
 CVE-2007-3783 (SQL injection vulnerability in default.asp in enVivo!CMS allows
remote ...)
 	NOT-FOR-US: enVivo!CMS
 CVE-2007-3782 (MySQL Community Server before 5.0.45 allows remote authenticated
users ...)
-	TODO: check
+	- mysql-dfsg-5.0 5.0.45-1
+	TODO: check mysql 4
 CVE-2007-3781 (MySQL Community Server before 5.0.45 does not require privileges
such ...)
-	TODO: check
+	- mysql-dfsg-5.0 5.0.45-1
+	TODO: check mysql 4
 CVE-2007-3780 (MySQL Community Server before 5.0.45 allows remote attackers to
cause ...)
-	TODO: check
+	- mysql-dfsg-5.0 5.0.45-1
+	TODO: check mysql 4
 CVE-2007-3779 (PHP local file inclusion vulnerability in gpg_pop_init.php in
the ...)
-	TODO: check
+	NOT-FOR-US: G/PGP (GPG) Plugin for Squirrelmail
 CVE-2007-3778 (The G/PGP (GPG) Plugin 2.0, and 2.1dev before 20060912, for ...)
-	TODO: check
+	NOT-FOR-US: G/PGP (GPG) Plugin for Squirrelmail
 CVE-2007-3777 (avg7core.sys 7.5.0.444 in Grisoft AVG Anti-Virus 7.5.448 and
Free ...)
-	TODO: check
+	NOT-FOR-US: Grisoft AVG Anti-Virus
 CVE-2007-3776 (Cisco Unified Communications Manager (CUCM, formerly
CallManager) and ...)
 	NOT-FOR-US: Cisco
 CVE-2007-3775 (Unspecified vulnerability in Cisco Unified Communications
Manager ...)
@@ -716,9 +719,9 @@
 CVE-2007-3774 (Dvbbs 7.1.0 SP1 stores sensitive information under the web root
with ...)
 	NOT-FOR-US: Dvbbs
 CVE-2007-3773 (Cross-site request forgery (CSRF) vulnerability in the
Email-Template ...)
-	TODO: check
+	NOT-FOR-US: Generic YouTube Clone Script
 CVE-2007-3772 (Directory traversal vulnerability in news/show.php in PsNews 1.1
...)
-	TODO: check
+	NOT-FOR-US: PsNews
 CVE-2007-3771 (Stack-based buffer overflow in the Internet E-mail Auto-Protect
...)
 	TODO: check
 CVE-2007-3770 (The terminal_helper_execute function in terminal/terminal.c in
Xfce ...)