Secure testing commits - Dec 2008 - r10694 - data/CVE

Author: nion
Date: 2008-12-14 16:12:13 +0000 (Sun, 14 Dec 2008)
New Revision: 10694

Modified:
   data/CVE/list
Log:
NFUs
CVE-2008-5396 fixed in zaptel 1:1.4.11~dfsg-3


Modified: data/CVE/list
==================================================================---
data/CVE/list	2008-12-14 15:59:00 UTC (rev 10693)
+++ data/CVE/list	2008-12-14 16:12:13 UTC (rev 10694)
@@ -151,7 +151,7 @@
 CVE-2008-5416 (Heap-based buffer overflow in Microsoft SQL Server 2000
8.00.2050, ...)
 	NOT-FOR-US: Microsoft SQL Server
 CVE-2008-5415 (The LDBserver service in the server in CA ARCserve Backup 11.1
through ...)
-	TODO: check
+	NOT-FOR-US: CA ARCserve Backup
 CVE-2008-5414 (Unspecified vulnerability in the Feature Pack for Web Services
in the ...)
 	NOT-FOR-US: IBM WebSphere
 CVE-2008-5413 (PerfServlet in the PMI/Performance Tools component in IBM
WebSphere ...)
@@ -189,11 +189,11 @@
 CVE-2008-5397 (Tor before 0.2.0.32 does not properly process the (1) User and
(2) ...)
 	- tor 0.2.0.32-1 (bug #505178)
 CVE-2008-5396 (Array index error in the (1) torisa.c and (2) dahdi/tor2.c
drivers in ...)
-	TODO: check
+	- zaptel 1:1.4.11~dfsg-3
 CVE-2008-5395 (The parisc_show_stack function in arch/parisc/kernel/traps.c in
the ...)
 	TODO: check
 CVE-2008-5393 (UPR-Kernel in Ubuntu Privacy Remix (UPR) before 8.04_r1 includes
...)
-	TODO: check
+	NOT-FOR-US: Ubuntu Privacy Remix
 CVE-2008-5392
 	RESERVED
 CVE-2008-5391
@@ -205,19 +205,19 @@
 CVE-2008-5388
 	RESERVED
 CVE-2008-5387 (Buffer overflow in autoconf6 in IBM AIX 6.1.0 through 6.1.2,
when ...)
-	TODO: check
+	NOT-FOR-US: IBM AIX
 CVE-2008-5386 (Buffer overflow in ndp in IBM AIX 6.1.0 through 6.1.2, when the
netcd ...)
-	TODO: check
+	NOT-FOR-US: IBM AIX
 CVE-2008-5385 (enq in bos.rte.printers in IBM AIX 6.1.0 through 6.1.2, when a
print ...)
-	TODO: check
+	NOT-FOR-US: IBM AIX
 CVE-2008-5384 (crontab in bos.rte.cron in IBM AIX 6.1.0 through 6.1.2 allows
local ...)
-	TODO: check
+	NOT-FOR-US: IBM AIX
 CVE-2008-5383 (Stack-based buffer overflow in National Instruments Electronics
...)
-	TODO: check
+	NOT-FOR-US: National Instruments Electronics Workbench
 CVE-2008-5382 (Cross-site request forgery (CSRF) vulnerability in I-O DATA
DEVICE ...)
-	TODO: check
+	NOT-FOR-US: I-O firmware
 CVE-2008-5381 (Buffer overflow in the URL processing in ffdshow (aka
ffdshow-tryout) ...)
-	TODO: check
+	NOT-FOR-US: ffdshow
 CVE-2008-5380 (gpsdrive (aka gpsdrive-scripts) 2.09 allows local users to
overwrite ...)
 	- gpsdrive <not-affected> (geo-nearest not shipped, geo-code already
fixed)
 	[etch] - gpsdrive <unfixed> (low; bug #508595)