Secure testing commits - Oct 2008 - r10058 - data/CVE

Author: white
Date: 2008-10-11 06:29:05 +0000 (Sat, 11 Oct 2008)
New Revision: 10058

Modified:
   data/CVE/list
Log:
NFU: FOSS Gallery

Modified: data/CVE/list
==================================================================---
data/CVE/list	2008-10-11 06:24:54 UTC (rev 10057)
+++ data/CVE/list	2008-10-11 06:29:05 UTC (rev 10058)
@@ -37,7 +37,8 @@
 CVE-2008-4515 (Blue Coat K9 Web Protection 4.0.230 Beta relies on client-side
...)
 	NOT-FOR-US: Blue Coat K9 Web Protection
 CVE-2008-4514 (The HTML parser in KDE Konqueror 3.5.9 allows remote attackers
to ...)
-	TODO: check
+	- kdebase <unfixed> (unimportant)
+	NOTE: browser crash is a non-issue
 CVE-2008-4513 (Cross-site scripting (XSS) vulnerability in BBcode API module in
...)
 	NOT-FOR-US: Phorum
 CVE-2008-4512 (ASP/MS Access Shoutbox, probably 1.1 beta, stores db/shoutdb.mdb
under ...)
@@ -47,7 +48,7 @@
 CVE-2008-4510 (Microsoft Windows Vista Home and Ultimate Edition SP1 and
earlier ...)
 	NOT-FOR-US: Microsoft
 CVE-2008-4509 (Unrestricted file upload vulnerability in processFiles.php in
FOSS ...)
-	TODO: check
+	NOT-FOR-US: FOSS Gallery
 CVE-2008-4508 (Stack-based buffer overflow in the file parsing function in
Tonec ...)
 	NOT-FOR-US: Tonec Internet Download Manager
 CVE-2008-4507 (Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix
pack 1 ...)