white at alioth.debian.org
2008-Aug-08 05:59 UTC
[Secure-testing-commits] r9535 - data/CVE
Author: white
Date: 2008-08-08 05:59:53 +0000 (Fri, 08 Aug 2008)
New Revision: 9535
Modified:
data/CVE/list
Log:
NFUs
Modified: data/CVE/list
==================================================================---
data/CVE/list 2008-08-07 23:15:29 UTC (rev 9534)
+++ data/CVE/list 2008-08-08 05:59:53 UTC (rev 9535)
@@ -200,7 +200,7 @@
CVE-2008-3390 (Directory traversal vulnerability in libraries/general.init.php
in ...)
NOT-FOR-US: Minishowcase Image Gallery
CVE-2008-3389 (Stack-based buffer overflow in the libbecompat library in Ingres
2.6, ...)
- TODO: check
+ NOT-FOR-US: Ingres
CVE-2008-3388 (Multiple SQL injection vulnerabilities in Def-Blog 1.0.3 allow
remote ...)
NOT-FOR-US: Def-Blog
CVE-2008-3387 (SQL injection vulnerability in show.php in PHPFootball 1.6
allows ...)
@@ -267,9 +267,9 @@
CVE-2008-3358
RESERVED
CVE-2008-3357 (Untrusted search path vulnerability in ingvalidpw in Ingres 2.6,
...)
- TODO: check
+ NOT-FOR-US: Ingres
CVE-2008-3356 (verifydb in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4), and
Ingres ...)
- TODO: check
+ NOT-FOR-US: Ingres
CVE-2008-3355 (SQL injection vulnerability in sitemap.xml.php in Camera Life
2.6.2 ...)
NOT-FOR-US: Camera Life
CVE-2008-3354 (Multiple PHP remote file inclusion vulnerabilities in the Newbb
Plus ...)
@@ -664,7 +664,7 @@
CVE-2008-3176
RESERVED
CVE-2008-3175 (Integer underflow in rxRPC.dll in the LGServer service in the
...)
- TODO: check
+ NOT-FOR-US: CA ARCserve Backup
CVE-2008-3174
RESERVED
CVE-2008-3173 (Microsoft Internet Explorer allows web sites to set cookies for
...)
@@ -2609,17 +2609,17 @@
CVE-2008-2326
RESERVED
CVE-2008-2325 (QuickLook in Apple Mac OS X 10.4.11 and 10.5.4 allows remote
attackers ...)
- TODO: check
+ NOT-FOR-US: Apple Mac OS X
CVE-2008-2324 (The Repair Permissions tool in Disk Utility in Apple Mac OS X
10.4.11 ...)
- TODO: check
+ NOT-FOR-US: Apple Mac OS X
CVE-2008-2323 (Unspecified vulnerability in Data Detectors Engine in Apple Mac
OS X ...)
- TODO: check
+ NOT-FOR-US: Apple Mac OS X
CVE-2008-2322 (Integer overflow in CoreGraphics in Apple Mac OS X 10.4.11,
10.5.2, ...)
- TODO: check
+ NOT-FOR-US: Apple Mac OS X
CVE-2008-2321 (Unspecified vulnerability in CoreGraphics in Apple Mac OS X
10.4.11 ...)
- TODO: check
+ NOT-FOR-US: Apple Mac OS X
CVE-2008-2320 (Stack-based buffer overflow in CarbonCore in Apple Mac OS X
10.4.11 ...)
- TODO: check
+ NOT-FOR-US: Apple Mac OS X
CVE-2008-2319
RESERVED
CVE-2008-2318 (The WOHyperlink implementation in WebObjects in Apple Xcode
tools ...)
@@ -3768,7 +3768,7 @@
CVE-2008-1811 (Unspecified vulnerability in Oracle Application Express 3.0.1
has ...)
NOT-FOR-US: Oracle
CVE-2008-1810 (Untrusted search path vulnerability in dbmsrv in SAP MaxDB
7.6.03.15 ...)
- TODO: check
+ NOT-FOR-US: SAP MaxDB
CVE-2008-1809 (Heap-based buffer overflow in Novell eDirectory 8.7.3 before
...)
NOT-FOR-US: Novell eDirectory
CVE-2008-1808 (Multiple off-by-one errors in FreeType2 before 2.3.6 allow ...)
@@ -4140,7 +4140,7 @@
CVE-2008-1663 (Cross-site scripting (XSS) vulnerability in HP System Management
...)
NOT-FOR-US: HP System Management Homepage
CVE-2008-1662 (Unspecified vulnerability in the HP System Administration
Manager ...)
- TODO: check
+ NOT-FOR-US: HP System Administration Manager
CVE-2008-1661 (Stack-based buffer overflow in DoubleTake.exe in HP StorageWorks
...)
NOT-FOR-US: HP StorageWorks
CVE-2008-1660 (Unspecified vulnerability in useradd on HP-UX B.11.11, B.11.23,
and ...)
@@ -4820,7 +4820,7 @@
{DSA-1595-1 DTSA-141-1}
- xorg-server 2:1.4.1~git20080517-2
CVE-2008-1376 (A certain Red Hat build script for nfs-utils before
1.0.9-35z.el5_2 on ...)
- TODO: check
+ NOT-FOR-US: Red Hat build script
CVE-2008-1375 (Race condition in the directory notification subsystem (dnotify)
in ...)
{DSA-1565-1}
- linux-2.6 2.6.25-2 (low)
@@ -11882,7 +11882,7 @@
CVE-2007-5401 (Unrestricted file upload vulnerability in uploadrequest.asp in
Layton ...)
NOT-FOR-US: Layton HelpBox
CVE-2007-5400 (Heap-based buffer overflow in the Shockwave Flash (SWF) frame
handling ...)
- TODO: check
+ NOT-FOR-US: RealPlayer
CVE-2007-5399 (Multiple heap-based buffer overflows in emlsr.dll in the EML
reader in ...)
NOT-FOR-US: KeyView
CVE-2007-5398 (Stack-based buffer overflow in the reply_netbios_packet function
in ...)
@@ -18084,7 +18084,7 @@
{DSA-1364-2 DSA-1364-1}
- vim 1:7.1-056+1 (low)
CVE-2007-2952 (Multiple stack-based buffer overflows in the filter service (aka
...)
- TODO: check
+ NOT-FOR-US: Blue Coat K9 Web Protection
CVE-2007-2951 (The parseIrcUrl function in src/kvirc/kernel/kvi_ircurl.cpp in
KVIrc ...)
- kvirc 2:3.2.4-5 (bug #434419; medium)
CVE-2007-2950 (Centennial Discovery 2006 Feature Pack 1, which is used by (1)
Numara ...)