Secure testing commits - Mar 2009 - r11508 - data/CVE

Author: jmm-guest
Date: 2009-03-31 21:46:06 +0000 (Tue, 31 Mar 2009)
New Revision: 11508

Modified:
   data/CVE/list
Log:
- new kernel issue
- NFUs


Modified: data/CVE/list
==================================================================---
data/CVE/list	2009-03-31 21:40:19 UTC (rev 11507)
+++ data/CVE/list	2009-03-31 21:46:06 UTC (rev 11508)
@@ -1,11 +1,11 @@
 CVE-2009-1175 (Cross-site scripting (XSS) vulnerability in apps/web/vs_diag.cgi
in ...)
 	TODO: check
 CVE-2009-1174 (The Web Services Security component in IBM WebSphere Application
...)
-	TODO: check
+	NOT-FOR-US: WebSphere
 CVE-2009-1173 (IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.3 uses
weak ...)
-	TODO: check
+	NOT-FOR-US: WebSphere
 CVE-2009-1172 (The JAX-RPC WS-Security runtime in the Web Services Security
component ...)
-	TODO: check
+	NOT-FOR-US: WebSphere
 CVE-2009-1171 (The TeX filter in Moodle 1.6 before 1.6.9+, 1.7 before 1.7.7+,
1.8 ...)
 	TODO: check
 CVE-2009-1170 (Unspecified vulnerability in Sun OpenSolaris snv_100 through
snv_101 ...)
@@ -46,7 +46,7 @@
 CVE-2009-1153
 	RESERVED
 CVE-2009-1152 (Siemens Gigaset SE461 WiMAX router 1.5-BL024.9.6401, and
possibly ...)
-	TODO: check
+	NOT-FOR-US: Siemens router
 CVE-2009-1151 (Static code injection vulnerability in setup.php in phpMyAdmin
2.11.x ...)
 	TODO: check
 CVE-2009-1150 (Multiple cross-site scripting (XSS) vulnerabilities in the
export page ...)
@@ -1149,7 +1149,9 @@
 CVE-2009-0788
 	RESERVED
 CVE-2009-0787 (The ecryptfs_write_metadata_to_contents function in the eCryptfs
...)
-	TODO: check
+	- linux-2.6 <unfixed>
+	[etch] - linux-2.6 <not-affected> (ecryptfs was merged in 2.6.19)
+	- linux-2.6.24 <removed>
 CVE-2009-0786
 	RESERVED
 CVE-2009-0785