Secure testing commits - Dec 2008 - r10620 - data/CVE

Author: jmm-guest
Date: 2008-12-04 21:28:31 +0000 (Thu, 04 Dec 2008)
New Revision: 10620

Modified:
   data/CVE/list
Log:
NFUs
tikiwiki removed


Modified: data/CVE/list
==================================================================---
data/CVE/list	2008-12-04 21:24:25 UTC (rev 10619)
+++ data/CVE/list	2008-12-04 21:28:31 UTC (rev 10620)
@@ -1,21 +1,21 @@
 CVE-2008-5323 (Cross-site scripting (XSS) vulnerability in index.php in Wysi
Wiki Wyg ...)
-	TODO: check
+	NOT-FOR-US: Wysi Wiki Wyg
 CVE-2008-5322 (Wysi Wiki Wyg 1.0 allows remote attackers to obtain system
information ...)
-	TODO: check
+	NOT-FOR-US: Wysi Wiki Wyg
 CVE-2008-5321 (SQL injection vulnerability in index.php in GesGaleri, a module
for ...)
 	TODO: check
 CVE-2008-5320 (SQL injection vulnerability in usersettings.php in e107 0.7.13
and ...)
-	TODO: check
+	NOT-FOR-US: e107
 CVE-2008-5319 (Unspecified vulnerability in Tikiwiki before 2.2 has unknown
impact ...)
-	TODO: check
+	- tikiwiki <removed>
 CVE-2008-5318 (Unspecified vulnerability in Tikiwiki before 2.2 has unknown
impact ...)
-	TODO: check
+	- tikiwiki <removed>
 CVE-2008-5317 (Integer signedness error in the cmsAllocGamma function in ...)
 	TODO: check
 CVE-2008-5316 (Buffer overflow in the ReadEmbeddedTextTag function in
src/cmsio1.c in ...)
 	TODO: check
 CVE-2008-5315 (Directory traversal vulnerability in the web interface in Apple
iPhone ...)
-	TODO: check
+	NOT-FOR-US: Apple iPhone Configuration Web Utility
 CVE-2008-XXXX [multiple insecure tempfiles usage issues in devscripts]
 	- devscripts <unfixed> (low; bug #507482)
 CVE-2008-5314 (Stack consumption vulnerability in libclamav/special.c in ClamAV
...)
@@ -5443,11 +5443,11 @@
 CVE-2008-3060 (V-webmail 1.5.0 allows remote attackers to obtain sensitive ...)
 	NOT-FOR-US: V-webmail
 CVE-2008-3059 (member/settings_account.php in Octeth Oempro 3.5.5.1, and
possibly ...)
-	TODO: check
+	NOT-FOR-US: Octeth Oempro
 CVE-2008-3058 (Multiple SQL injection vulnerabilities in Octeth Oempro 3.5.5.1,
and ...)
-	TODO: check
+	NOT-FOR-US: Octeth Oempro
 CVE-2008-3057 (Octeth Oempro 3.5.5.1, and possibly other versions before 4,
does not ...)
-	TODO: check
+	NOT-FOR-US: Octeth Oempro
 CVE-2008-3056 (SQL injection vulnerability in the Codeon Petition (cd_petition)
...)
 	NOT-FOR-US: cd_petition extension for TYPO3
 CVE-2008-3055 (SQL injection vulnerability in the Support view (ext_tbl)
extension ...)