Secure testing commits - May 2008 - r8671 - data/CVE

Author: white
Date: 2008-05-02 11:14:59 +0000 (Fri, 02 May 2008)
New Revision: 8671

Modified:
   data/CVE/list
Log:
More NFUs

Modified: data/CVE/list
==================================================================---
data/CVE/list	2008-05-02 11:04:54 UTC (rev 8670)
+++ data/CVE/list	2008-05-02 11:14:59 UTC (rev 8671)
@@ -74,19 +74,19 @@
 CVE-2008-2004
 	RESERVED
 CVE-2008-2003 (BadBlue 2.72 Personal Edition stores multiple programs in the
web ...)
-	TODO: check
+	NOT-FOR-US: BadBlue
 CVE-2008-2002 (Multiple cross-site request forgery (CSRF) vulnerabilities on
Motorola ...)
 	TODO: check
 CVE-2008-2001 (Apple Safari 3.1.1 allows remote attackers to cause a denial of
...)
-	TODO: check
+	NOT-FOR-US: Apple Safari
 CVE-2008-2000 (Unspecified vulnerability in Apple Safari 3.1.1 allows remote
...)
-	TODO: check
+	NOT-FOR-US: Apple Safari
 CVE-2008-1999 (Apple Safari 3.1.1 allows remote attackers to spoof the address
bar by ...)
-	TODO: check
+	NOT-FOR-US: Apple Safari
 CVE-2008-1998 (The NNSTAT (aka SYSPROC.NNSTAT) procedure in IBM DB2 8 before
FP16, ...)
-	TODO: check
+	NOT-FOR-US: Windows specific
 CVE-2008-1997 (Unspecified vulnerability in the ADMIN_SP_C2 procedure in IBM
DB2 8 ...)
-	TODO: check
+	NOT-FOR-US: IBM DB2
 CVE-2008-1996 (licq before 1.3.6 allows remote attackers to cause a denial of
service ...)
 	TODO: check
 CVE-2008-1995 (Sun Java System Directory Proxy Server 6.0, 6.1, and 6.2
classifies a ...)
@@ -94,21 +94,21 @@
 CVE-2008-1994 (Multiple stack-based buffer overflows in (a) acon.c, (b) menu.c,
and ...)
 	TODO: check
 CVE-2008-1993 (Acidcat CMS 3.4.1 does not restrict access to the FCKEditor
component, ...)
-	TODO: check
+	NOT-FOR-US: Acidcat
 CVE-2008-1992 (Acidcat CMS 3.4.1 does not properly restrict access to (1) ...)
-	TODO: check
+	NOT-FOR-US: Acidcat
 CVE-2008-1991 (Cross-site scripting (XSS) vulnerability in
admin_colors_swatch.asp in ...)
-	TODO: check
+	NOT-FOR-US: Acidcat
 CVE-2008-1990 (Multiple SQL injection vulnerabilities in Acidcat CMS 3.4.1
allow ...)
-	TODO: check
+	NOT-FOR-US: Acidcat
 CVE-2008-1989 (PHP remote file inclusion vulnerability in 123flashchat.php in
the 123 ...)
-	TODO: check
+	NOT-FOR-US: Flash Chat
 CVE-2008-1988 (Unrestricted file upload vulnerability in the file_upload
function in ...)
-	TODO: check
+	NOT-FOR-US: EncapsGallery
 CVE-2008-1987 (Cross-site scripting (XSS) vulnerability in search.php in ...)
-	TODO: check
+	NOT-FOR-US: EncapsGallery
 CVE-2008-1986 (Cross-site scripting (XSS) vulnerability in liste_article.php in
Blog ...)
-	TODO: check
+	NOT-FOR-US: PixelMotion
 CVE-2008-1985 (Cross-site scripting (XSS) vulnerability in base.php in
DigitalHive ...)
 	TODO: check
 CVE-2008-1984 (The eTrust Common Services (Transport) Daemon (eCSqdmn) in CA
Secure ...)