Author: atomo64-guest
Date: 2009-04-21 17:54:51 +0000 (Tue, 21 Apr 2009)
New Revision: 11676
Modified:
data/CVE/list
Log:
NFUs, three geronimo (RFP) issues
Modified: data/CVE/list
==================================================================---
data/CVE/list 2009-04-21 10:54:12 UTC (rev 11675)
+++ data/CVE/list 2009-04-21 17:54:51 UTC (rev 11676)
@@ -383,7 +383,7 @@
CVE-2009-1245 (Multiple SQL injection vulnerabilities in the insert_to_pastebin
...)
NOT-FOR-US: CCCP Community Clan Portal Pastebin
CVE-2009-1244 (Unspecified vulnerability in the virtual machine display
function in ...)
- TODO: check
+ NOT-FOR-US: VMware
CVE-2009-1243 (net/ipv4/udp.c in the Linux kernel before 2.6.29.1 performs an
...)
- linux-2.6 <not-affected> (Issue was introduced after 2.6.27 release)
- linux-2.6.24 <not-affected> (Issue was introduced after 2.6.27
release)
@@ -5531,9 +5531,9 @@
- pngcrush 1.6.15-1
- libpng 1.2.35-1 (bug #516256)
CVE-2009-0039 (Multiple cross-site request forgery (CSRF) vulnerabilities in
the web ...)
- TODO: check
+ - geronimo <itp> (bug #481869)
CVE-2009-0038 (Multiple cross-site scripting (XSS) vulnerabilities in the web
...)
- TODO: check
+ - geronimo <itp> (bug #481869)
CVE-2009-0037 (The redirect implementation in curl and libcurl 5.11 through
7.19.3, ...)
{DSA-1738-1}
- curl 7.18.2-8.1 (bug #518423)
@@ -5771,7 +5771,7 @@
CVE-2008-5519 (The JK Connector (aka mod_jk) 1.2.0 through 1.2.26 in Apache
Tomcat ...)
- tomcat5.5 <unfixed>
CVE-2008-5518 (Multiple directory traversal vulnerabilities in the web
administration ...)
- TODO: check
+ - geronimo <itp> (bug #481869)
CVE-2008-5517 (The web interface in git (gitweb) 1.5.x before 1.5.6 allows
remote ...)
{DSA-1708-1}
- git-core 1:1.5.6.5-2 (low; bug #512330)
@@ -16549,7 +16549,7 @@
[etch] - evolution <no-dsa> (Minor issue)
NOTE: Requires that the ITip Formatter plugin is disabled, which is enabled by
default.
CVE-2008-1107 (Multiple stack-based buffer overflows in the Danske Bank e-Sec
Control ...)
- TODO: check
+ NOT-FOR-US: Danske Bank e-Sec Control Module
CVE-2008-1106 (The management interface in Akamai Client (formerly Red Swoosh)
3322 ...)
NOT-FOR-US: Akamai Client
CVE-2008-1105 (Heap-based buffer overflow in the receive_smb_raw function in
...)