Secure testing commits - Aug 2008 - r9588 - data/CVE

Author: white
Date: 2008-08-16 10:27:00 +0000 (Sat, 16 Aug 2008)
New Revision: 9588

Modified:
   data/CVE/list
Log:
two more NFUs

Modified: data/CVE/list
==================================================================---
data/CVE/list	2008-08-16 10:10:19 UTC (rev 9587)
+++ data/CVE/list	2008-08-16 10:27:00 UTC (rev 9588)
@@ -344,11 +344,11 @@
 CVE-2008-3501 (Cross-site scripting (XSS) vulnerability in the WebAccess simple
...)
 	NOT-FOR-US: Novell Groupwise
 CVE-2008-3500 (Cross-site scripting (XSS) vulnerability in the Suggested Terms
module ...)
-	TODO: check
+	NOT-FOR-US: suggested terms, additional drupal module
 CVE-2008-3499 (Unspecified vulnerability in "a page in the workarea
folder" in Ektron ...)
 	NOT-FOR-US: Ektron CMS400.NET
 CVE-2008-3498 (SQL injection vulnerability in the nBill (com_netinvoice)
component ...)
-	TODO: check
+	NOT-FOR-US: nBill, joomla component
 CVE-2008-3497 (SQL injection vulnerability in pages.php in MyPHP CMS 0.3.1
allows ...)
 	NOT-FOR-US: MyPHP CMS
 CVE-2008-3496 (Buffer overflow in format descriptor parsing in the
uvc_parse_format ...)