Secure testing commits - Jan 2009 - r10948 - data/CVE

Author: kees
Date: 2009-01-13 21:24:48 +0000 (Tue, 13 Jan 2009)
New Revision: 10948

Modified:
   data/CVE/list
Log:
NFUs: 23, small white-space fix

Modified: data/CVE/list
==================================================================---
data/CVE/list	2009-01-13 21:16:19 UTC (rev 10947)
+++ data/CVE/list	2009-01-13 21:24:48 UTC (rev 10948)
@@ -1,3 +1,41 @@
+CVE-2008-5901
+	NOT-FOR-US: iyzi Forum
+CVE-2008-5900
+	NOT-FOR-US: CodeAvalanche Articles
+CVE-2008-5899
+	NOT-FOR-US: CodeAvalanche FreeForAll
+CVE-2008-5898
+	NOT-FOR-US: CodeAvalanche Directory
+CVE-2008-5897
+	NOT-FOR-US: CodeAvalanche FreeWallpaper
+CVE-2008-5896
+	NOT-FOR-US: CodeAvalanche RateMySite
+CVE-2008-5895
+	NOT-FOR-US: Mediatheka
+CVE-2008-5894
+	NOT-FOR-US: Mediatheka
+CVE-2008-5893
+	NOT-FOR-US: ClickAndEmail
+CVE-2008-5892
+	NOT-FOR-US: ClickAndEmail
+CVE-2008-5891
+	NOT-FOR-US: Injader
+CVE-2008-5890
+	NOT-FOR-US: Injader
+CVE-2008-5889
+	NOT-FOR-US: Click&Rank
+CVE-2008-5888
+	NOT-FOR-US: Click&Rank
+CVE-2008-5887
+	NOT-FOR-US: phplist
+CVE-2008-5886
+	NOT-FOR-US: TAKempis Discussion Web
+CVE-2008-5885
+	NOT-FOR-US: Net Guys ASPired2Quote
+CVE-2008-5884
+	NOT-FOR-US: AyeView
+CVE-2008-5883
+	NOT-FOR-US: mini-pub
 CVE-2009-XXXX [xrdp: multiple vulnerabilities]
 	- xrdp <unfixed> (bug filed)
 CVE-2009-XXXX [amaya: stack based buffer overflow]
@@ -182,7 +220,7 @@
 CVE-2009-0044
 	RESERVED
 CVE-2009-0043 (The smmsnmpd service in CA Service Metric Analysis r11.0 through
r11.1 ...)
-	TODO: check
+	NOT-FOR-US: CA Service Metric Analysis r11.0 through r11.1 SP1 and Service
 CVE-2009-0042
 	RESERVED
 CVE-2009-0041
@@ -2709,7 +2747,7 @@
 CVE-2008-4828
 	RESERVED
 CVE-2008-4827 (Multiple heap-based buffer overflows in the AddTab method in the
(1) ...)
-	TODO: check
+	NOT-FOR-US: ComponentOne SizerOne
 CVE-2008-4826
 	RESERVED
 CVE-2008-4825
@@ -3970,8 +4008,8 @@
 	RESERVED
 CVE-2008-4307 [kernel: BUG() in locks_remove_flock]
 	RESERVED
-        - linux-2.6 <unfixed>
-        - linux-2.6.24 <removed>
+	- linux-2.6 <unfixed>
+	- linux-2.6.24 <removed>
 CVE-2008-4306 (Buffer overflow in enscript before 1.6.4 has unknown impact and
attack ...)
 	{DSA-1670-1}
 	- enscript 1.6.4-13 (bug #506261)
@@ -5173,7 +5211,7 @@
 CVE-2008-3820
 	RESERVED
 CVE-2008-3819 (dnsserver in Cisco Application Control Engine Global Site
Selector ...)
-	TODO: check
+	NOT-FOR-US: Cisco Application Control Engine Global Site Selector (GSS)
 CVE-2008-3818
 	RESERVED
 CVE-2008-3817 (Memory leak in Cisco Adaptive Security Appliances (ASA) 5500
Series ...)
@@ -14185,7 +14223,7 @@
 CVE-2008-0068 (Directory traversal vulnerability in OpenView5.exe in HP
OpenView ...)
 	NOT-FOR-US: HP OpenView
 CVE-2008-0067 (Multiple stack-based buffer overflows in HP OpenView Network
Node ...)
-	TODO: check
+	NOT-FOR-US: HP OpenView Network Node Manager (OV NNM)
 CVE-2008-0066 (Multiple buffer overflows in htmsr.dll in the HTML speed reader
in ...)
 	NOT-FOR-US: KeyView
 CVE-2008-0065 (Multiple stack-based buffer overflows in in_mp3.dll in Winamp
5.21, ...)