Secure testing commits - Jan 2009 - r11003 - data/CVE

Author: thomasbl-guest
Date: 2009-01-21 12:33:07 +0000 (Wed, 21 Jan 2009)
New Revision: 11003

Modified:
   data/CVE/list
Log:
NFU''s



Modified: data/CVE/list
==================================================================---
data/CVE/list	2009-01-21 10:04:00 UTC (rev 11002)
+++ data/CVE/list	2009-01-21 12:33:07 UTC (rev 11003)
@@ -1,17 +1,17 @@
 CVE-2009-0173 (Unspecified vulnerability in the server in IBM DB2 9.1 before
FP6a and ...)
-	TODO: check
+	NOT-FOR-US: IBM DB2
 CVE-2009-0172 (Unspecified vulnerability in IBM DB2 9.1 before FP6a and 9.5
before ...)
-	TODO: check
+	NOT-FOR-US: IBM DB2 9.1
 CVE-2009-0171 (The Sun SPARC Enterprise M4000 and M5000 Server, within a
certain ...)
-	TODO: check
+	NOT-FOR-US: Sun SPARC Enterprise M4000 and M5000 Server
 CVE-2009-0170 (Sun Java System Access Manager 6.3 2005Q1, 7 2005Q4, and 7.1
allows ...)
 	TODO: check
 CVE-2009-0169 (Sun Java System Access Manager 7.1 allows remote authenticated
...)
 	TODO: check
 CVE-2009-0168 (Unspecified vulnerability in ppdmgr in Sun Solaris 10 and
OpenSolaris ...)
-	TODO: check
+	NOT-FOR-US: ppdmgr in Sun Solaris 10 and OpenSolaris
 CVE-2009-0167 (Unspecified vulnerability in lpadmin in Sun Solaris 10 and
OpenSolaris ...)
-	TODO: check
+	NOT-FOR-US: lpadmin in Sun Solaris 10 and OpenSolaris
 CVE-2009-0166
 	RESERVED
 CVE-2009-0165
@@ -73,13 +73,13 @@
 CVE-2009-0137
 	RESERVED
 CVE-2009-0134 (Insecure method vulnerability in the EasyGrid.SGCtrl.32 ActiveX
...)
-	TODO: check
+	NOT-FOR-US: EasyGrid.SGCtrl.32 ActiveX control
 CVE-2008-5910 (Unspecified vulnerability in txzonemgr in Sun OpenSolaris has
unknown ...)
-	TODO: check
+	NOT-FOR-US: txzonemgr in Sun OpenSolaris
 CVE-2008-5909 (Unspecified vulnerability in conv_lpd in Sun OpenSolaris has
unknown ...)
-	TODO: check
+	NOT-FOR-US: conv_lpd in Sun OpenSolaris
 CVE-2008-5908 (Unspecified vulnerability in the root/boot archive tool in Sun
...)
-	TODO: check
+	NOT-FOR-US: root/boot archive tool in Sun OpenSolaris
 CVE-2009-0135 (Multiple integer overflows in the Audible::Tag::readTag function
in ...)
 	{DSA-1706-1}
 	- amarok 1.4.10-2 (medium)
@@ -342,13 +342,13 @@
 CVE-2009-0057
 	RESERVED
 CVE-2009-0056 (Cross-site request forgery (CSRF) vulnerability in the
administration ...)
-	TODO: check
+	NOT-FOR-US: Cisco IronPort Encryption Appliance
 CVE-2009-0055 (Cross-site request forgery (CSRF) vulnerability in the
administration ...)
-	TODO: check
+	NOT-FOR-US: Cisco IronPort Encryption Appliance
 CVE-2009-0054 (PXE Encryption in Cisco IronPort Encryption Appliance 6.2.4
before ...)
-	TODO: check
+	NOT-FOR-US: Cisco IronPort Encryption Appliance
 CVE-2009-0053 (PXE Encryption in Cisco IronPort Encryption Appliance 6.2.4
before ...)
-	TODO: check
+	NOT-FOR-US: Cisco IronPort Encryption Appliance
 CVE-2009-0052
 	RESERVED
 CVE-2009-0051 (ZXID 0.29 and earlier does not properly check the return value
from ...)
@@ -3821,7 +3821,7 @@
 	- linux-2.6.24 2.6.24-6~etchnhalf.6
 	[etch] - linux-2.6 <not-affected> (vulnerable code not present)
 CVE-2008-4444 (Cisco Unified IP Phone (aka SIP phone) 7960G and 7940G with
firmware ...)
-	TODO: check
+	NOT-FOR-US: Cisco Unified IP Phone
 CVE-2008-4443
 	RESERVED
 CVE-2008-4442
@@ -5390,13 +5390,13 @@
 CVE-2008-3822
 	RESERVED
 CVE-2008-3821 (Multiple cross-site scripting (XSS) vulnerabilities in the HTTP
server ...)
-	TODO: check
+	NOT-FOR-US: Cisco IOS
 CVE-2008-3820
 	RESERVED
 CVE-2008-3819 (dnsserver in Cisco Application Control Engine Global Site
Selector ...)
 	NOT-FOR-US: Cisco Application Control Engine Global Site Selector (GSS)
 CVE-2008-3818 (Cisco ONS 15310-CL, 15310-MA, 15327, 15454, 15454 SDH, and 15600
with ...)
-	TODO: check
+	NOT-FOR-US: Cisco ONS
 CVE-2008-3817 (Memory leak in Cisco Adaptive Security Appliances (ASA) 5500
Series ...)
 	NOT-FOR-US: Cisco
 CVE-2008-3816 (Unspecified vulnerability in Cisco Adaptive Security Appliances
(ASA) ...)