Secure testing commits - Jul 2008 - r9297 - data/CVE

Author: white
Date: 2008-07-11 00:22:02 +0000 (Fri, 11 Jul 2008)
New Revision: 9297

Modified:
   data/CVE/list
Log:
NFUs

Modified: data/CVE/list
==================================================================---
data/CVE/list	2008-07-11 00:18:30 UTC (rev 9296)
+++ data/CVE/list	2008-07-11 00:22:02 UTC (rev 9297)
@@ -2301,9 +2301,9 @@
 CVE-2008-2063 (SQL injection vulnerability in browse.videos.php in Joovili 3.1
allows ...)
 	NOT-FOR-US: Joovili
 CVE-2008-2062 (The Real-Time Information Server (RIS) Data Collector service in
Cisco ...)
-	TODO: check
+	NOT-FOR-US: Cisco Real-Time Information Server (RIS) Data Collector service
 CVE-2008-2061 (The Computer Telephony Integration (CTI) Manager service in
Cisco ...)
-	TODO: check
+	NOT-FOR-US: Cisco Computer Telephony Integration (CTI) Manager service
 CVE-2008-2060 (Unspecified vulnerability in Cisco Intrusion Prevention System
(IPS) ...)
 	NOT-FOR-US: Cisco
 CVE-2008-2059 (Cisco Adaptive Security Appliance (ASA) and Cisco PIX security
...)
@@ -2552,7 +2552,7 @@
 	- xen-unstable <not-affected> (Vulnerable code not present, introduced
in changeset 17630)
 	TODO: check that next upload includes changes until changeset 17643 or higher
 CVE-2008-1951 (Untrusted search path vulnerability in a certain Red Hat build
script ...)
-	TODO: check
+	NOT-FOR-US: Red Hat issue
 CVE-2008-1950 (Integer signedness error in the _gnutls_ciphertext2compressed
function ...)
 	{DSA-1581-1}
 	- gnutls13 2.0.4-4 (low)
@@ -3201,7 +3201,7 @@
 CVE-2008-1677 (Buffer overflow in the regular expression handler in Red Hat
Directory ...)
 	NOT-FOR-US: Red Hat Directory Server
 CVE-2008-1676 (Red Hat PKI Common Framework (rhpki-common) in Red Hat
Certificate ...)
-	TODO: check
+	NOT-FOR-US: Red Hat Issue
 CVE-2008-1675 (The bdx_ioctl_priv function in the tehuti driver (tehuti.c) in
Linux ...)
 	- linux-2.6 2.6.25-2 (low)
 	[etch] - linux-2.6 <not-affected> (Tehuti driver not in 2.6.18)
@@ -3239,7 +3239,7 @@
 CVE-2008-1664
 	RESERVED
 CVE-2008-1663 (Cross-site scripting (XSS) vulnerability in HP System Management
...)
-	TODO: check
+	NOT-FOR-US: HP System Management Homepage
 CVE-2008-1662
 	RESERVED
 CVE-2008-1661 (Stack-based buffer overflow in DoubleTake.exe in HP StorageWorks
...)
@@ -3713,7 +3713,7 @@
 CVE-2008-1455
 	RESERVED
 CVE-2008-1454 (Unspecified vulnerability in Microsoft DNS in Windows 2000 SP4,
XP SP2 ...)
-	TODO: check
+	NOT-FOR-US: Windows issue
 CVE-2008-1453 (The Bluetooth stack in Microsoft Windows XP SP2 and SP3, and
Vista ...)
 	NOT-FOR-US: Windows Xp
 CVE-2008-1452
@@ -3757,7 +3757,7 @@
 CVE-2008-1436 (Microsoft Windows XP Professional SP2, Vista, and Server 2003
and 2008 ...)
 	NOT-FOR-US: Windows
 CVE-2008-1435 (Windows Explorer in Microsoft Windows Vista up to SP1, and
Server ...)
-	TODO: check
+	NOT-FOR-US: Windows issue
 CVE-2008-1434 (Use-after-free vulnerability in Microsoft Word in Office 2000
and XP ...)
 	NOT-FOR-US: Microsoft Word
 CVE-2008-1433