[Secure-testing-commits] r11962 - data/CVE

Steffen Joeris
Sun, 24 May 2009 04:58:24 -0000

Author: white
Date: 2009-05-24 04:58:24 +0000 (Sun, 24 May 2009)
New Revision: 11962

Modified:
   data/CVE/list
Log:
NFUs

Modified: data/CVE/list
==================================================================---
data/CVE/list	2009-05-23 15:45:49 UTC (rev 11961)
+++ data/CVE/list	2009-05-24 04:58:24 UTC (rev 11962)
@@ -397,9 +397,9 @@
 	- file 5.03-1
 	TODO: Check, whether code was introduced in 5.x as well like the other issues
 CVE-2009-1594 (Armorlogic Profense Web Application Firewall before 2.2.22, and
2.4.x ...)
-	TODO: check
+	NOT-FOR-US: Armorlogic Profense Web Application Firewall
 CVE-2009-1593 (Armorlogic Profense Web Application Firewall before 2.2.22, and
2.4.x ...)
-	TODO: check
+	NOT-FOR-US: Armorlogic Profense Web Application Firewall
 CVE-2009-1592 (Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24
allows ...)
 	NOT-FOR-US: ElectraSoft 32bit FTP
 CVE-2009-1591 (CRLF injection vulnerability in CGI RESCUE Web Mailer before
1.04 ...)
@@ -922,7 +922,7 @@
 CVE-2009-1419
 	RESERVED
 CVE-2009-1418 (Cross-site scripting (XSS) vulnerability in HP System Management
...)
-	TODO: check
+	NOT-FOR-US: HP System Management Homepage
 CVE-2009-1417 (gnutls-cli in GnuTLS before 2.6.6 does not verify the activation
and ...)
 	- gnutls26 2.6.6-1 (medium; bug #528281)
 	- gnutls13 <removed>