Secure testing commits - Oct 2007 - r6762 - data/CVE

Author: frolic-guest
Date: 2007-10-02 14:39:11 +0000 (Tue, 02 Oct 2007)
New Revision: 6762

Modified:
   data/CVE/list
Log:
some NFU''s fixed.


Modified: data/CVE/list
==================================================================---
data/CVE/list	2007-10-02 12:38:45 UTC (rev 6761)
+++ data/CVE/list	2007-10-02 14:39:11 UTC (rev 6762)
@@ -645,7 +645,7 @@
 CVE-2007-4881 (SQL injection vulnerability in profile/myprofile.php in
psi-labs.com ...)
 	NOT-FOR-US: Psilabs
 CVE-2007-4880 (Buffer overflow in the Client Acceptor Daemon (CAD), dsmcad.exe,
in ...)
-	TODO: check
+	NOT-FOR-US: IBM Tivoli Storage Manager (TSM)
 CVE-2007-4879 (Mozilla Firefox 2.0.x can automatically install TLS client ...)
 	- iceweasel <unfixed> (low; bug #444803)
 	- iceape <unfixed> (low; bug #444805)
@@ -662,9 +662,9 @@
 CVE-2007-4874 (Multiple cross-site scripting (XSS) vulnerabilities in SimpNews
...)
 	NOT-FOR-US: SimpNews
 CVE-2007-4873 (SimpNews 2.41.03 stores sensitive information under the web root
with ...)
-	TODO: check
+	NOT-FOR-US: SimpNews
 CVE-2007-4872 (SimpNews 2.41.03 allows remote attackers to obtain sensitive
...)
-	TODO: check
+	NOT-FOR-US: SimpNews
 CVE-2007-4871
 	RESERVED
 CVE-2007-4870
@@ -1109,7 +1109,7 @@
 CVE-2007-4672
 	RESERVED
 CVE-2007-4671 (Unspecified vulnerability in Safari in Apple iPhone 1.1.1 allows
...)
-	TODO: check
+	NOT-FOR-US: Safari
 CVE-2007-4670 (Unspecified vulnerability in PHP before 5.2.4 has unknown impact
and ...)
 	- php5 <unfixed> (unimportant)
 	- php4 <removed> (unimportant)
@@ -3173,23 +3173,23 @@
 	[etch] - kdebase <no-dsa> (Minor issue)
 	NOTE: http://marc.info/?l=full-disclosure&m=118437069815691&w=2
 CVE-2007-3761 (Cross-site scripting (XSS) vulnerability in Safari in Apple
iPhone ...)
-	TODO: check
+	NOT-FOR-US: Safari 
 CVE-2007-3760 (Cross-site scripting (XSS) vulnerability in Safari in Apple
iPhone ...)
-	TODO: check
+	NOT-FOR-US: Safari 
 CVE-2007-3759 (Safari in Apple iPhone 1.1.1, when requested to disable
Javascript, ...)
-	TODO: check
+	NOT-FOR-US: Safari 
 CVE-2007-3758 (Safari in Apple iPhone 1.1.1 allows remote attackers to set
Javascript ...)
-	TODO: check
+	NOT-FOR-US: Safari 
 CVE-2007-3757 (Safari in Apple iPhone 1.1.1 allows remote user-assisted
attackers to ...)
-	TODO: check
+	NOT-FOR-US: Safari 
 CVE-2007-3756 (Safari in Apple iPhone 1.1.1 allows remote attackers to obtain
...)
-	TODO: check
+	NOT-FOR-US: Safari 
 CVE-2007-3755 (Mail in Apple iPhone 1.1.1 allows remote user-assisted attackers
to ...)
-	TODO: check
+	NOT-FOR-US: Aplle iPhone 
 CVE-2007-3754 (Mail in Apple iPhone 1.1.1, when using SSL, does not warn the
user ...)
-	TODO: check
+	NOT-FOR-US: Aplle iPhone
 CVE-2007-3753 (Apple iPhone 1.1.1, with Bluetooth enabled, allows physically
...)
-	TODO: check
+	NOT-FOR-US: Aplle iPhone
 CVE-2007-3752 (Heap-based buffer overflow in Apple iTunes before 7.4 allows
remote ...)
 	NOT-FOR-US: iTunes
 CVE-2007-3751