Author: kees
Date: 2009-09-10 05:35:54 +0000 (Thu, 10 Sep 2009)
New Revision: 12779
Modified:
data/CVE/list
Log:
NFUs: 30, fixed: nasm
Modified: data/CVE/list
==================================================================---
data/CVE/list 2009-09-10 04:01:08 UTC (rev 12778)
+++ data/CVE/list 2009-09-10 05:35:54 UTC (rev 12779)
@@ -1,51 +1,51 @@
CVE-2009-3110 (Race condition in the file transfer functionality in Symantec
Altiris ...)
- TODO: check
+ NOT-FOR-US: Symantec Altiris Deployment Solution
CVE-2009-3109 (Unspecified vulnerability in the AClient agent in Symantec
Altiris ...)
- TODO: check
+ NOT-FOR-US: Symantec Altiris Deployment Solution
CVE-2009-3108 (The Aclient GUI in Symantec Altiris Deployment Solution 6.9.x
before ...)
- TODO: check
+ NOT-FOR-US: Symantec Altiris Deployment Solution
CVE-2009-3107 (Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build
430 ...)
- TODO: check
+ NOT-FOR-US: Symantec Altiris Deployment Solution
CVE-2009-3106 (The Servlet Engine/Web Container component in IBM WebSphere ...)
- TODO: check
+ NOT-FOR-US: IBM WebSphere Application Server
CVE-2009-3105 (Cross-site scripting (XSS) vulnerability in IBM Lotus iNotes
(aka ...)
- TODO: check
+ NOT-FOR-US: IBM Lotus iNotes
CVE-2009-3104 (Unspecified vulnerability in Symantec Norton AntiVirus 2005
through ...)
- TODO: check
+ NOT-FOR-US: Symantec Norton AntiVirus
CVE-2009-3103 (Array index error in the SMB2 protocol implementation in
srv2.sys in ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2009-3102 (The doHotCopy subroutine in socket-server.pl in Zmanda Recovery
...)
- TODO: check
+ NOT-FOR-US: Zmanda Recovery Manager
CVE-2009-3101 (xscreensaver (aka Gnome-XScreenSaver) in Sun Solaris 10, and
...)
TODO: check
CVE-2009-3100 (xscreensaver (aka Gnome-XScreenSaver) in Sun Solaris 9 and 10,
...)
TODO: check
CVE-2009-3099 (Unspecified vulnerability in HP OpenView Operations Manager 8.1
on ...)
- TODO: check
+ NOT-FOR-US: HP OpenView Operations Manager
CVE-2009-3098 (Unspecified vulnerability in the Portal in HP Operations
Dashboard 2.1 ...)
- TODO: check
+ NOT-FOR-US: HP Operations Dashboard
CVE-2009-3097 (Multiple unspecified vulnerabilities in HP Performance Insight
5.3 on ...)
TODO: check
CVE-2009-3096 (Multiple unspecified vulnerabilities in HP Performance Insight
5.3 ...)
- TODO: check
+ NOT-FOR-US: HP Performance Insight
CVE-2009-3095 (The mod_proxy_ftp module in the Apache HTTP Server allows remote
...)
TODO: check
CVE-2009-3094 (The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c
in the ...)
TODO: check
CVE-2009-3093 (Unspecified vulnerability on the ASUS WL-500W wireless router
has ...)
- TODO: check
+ NOT-FOR-US: ASUS WL-500W
CVE-2009-3092 (Buffer overflow on the ASUS WL-500W wireless router has unknown
impact ...)
- TODO: check
+ NOT-FOR-US: ASUS WL-500W
CVE-2009-3091 (Unspecified vulnerability on the ASUS WL-330gE has unknown
impact and ...)
- TODO: check
+ NOT-FOR-US: ASUS WL-330gE
CVE-2009-3090 (Unspecified vulnerability in IBM Tivoli Directory Server (TDS)
6.0 on ...)
- TODO: check
+ NOT-FOR-US: IBM Tivoli Directory Server
CVE-2009-3089 (IBM Tivoli Directory Server (TDS) 6.0 allows remote attackers to
cause ...)
- TODO: check
+ NOT-FOR-US: IBM Tivoli Directory Server
CVE-2009-3088 (Heap-based buffer overflow in ibmdiradm in IBM Tivoli Directory
Server ...)
TODO: check
CVE-2009-3087 (Unspecified vulnerability in nserver.exe in the server in IBM
Lotus ...)
- TODO: check
+ NOT-FOR-US: IBM Lotus Domino
CVE-2009-3086 (A certain algorithm in Ruby on Rails 2.1.0 through 2.2.2, and
2.3.x ...)
TODO: check
CVE-2009-3085 (The XMPP protocol plugin in libpurple in Pidgin before 2.6.2
does not ...)
@@ -57,9 +57,9 @@
CVE-2008-7185 (GNOME Rhythmbox 0.11.5 allows remote attackers to cause a denial
of ...)
TODO: check
CVE-2008-7184 (Cross-site scripting (XSS) vulnerability in Diigo Toolbar and
Diigolet ...)
- TODO: check
+ NOT-FOR-US: Diigo Toolbar and Diigolet
CVE-2008-7183 (PHP remote file inclusion vulnerability in eva/index.php in EVA
CMS ...)
- TODO: check
+ NOT-FOR-US: EVA CMS
CVE-2009-XXXX [viewvc: XSS and illegal characters while printing name-value
pairs]
- viewvc <unfixed> (low; bug #545779)
NOTE: CVE id has been requested
@@ -102,7 +102,7 @@
CVE-2008-7178 (Directory traversal vulnerability in Uploader module 1.1 for
XOOPS ...)
NOT-FOR-US: XOOPS
CVE-2008-7177 (Buffer overflow in the listing module in Netwide Assembler
(NASM) ...)
- NOT-FOR-US: Netwide Assembler
+ - nasm 2.03.01-1 (low)
CVE-2008-7176 (Multiple directory traversal vulnerabilities in Facil CMS 0.1RC
allow ...)
NOT-FOR-US: Facil CMS
CVE-2008-7175 (Cross-site scripting (XSS) vulnerability in wp-admin/admin.php
in ...)
@@ -1858,7 +1858,7 @@
CVE-2009-2629
RESERVED
CVE-2009-2628 (The VMnc media codec in vmnc.dll in VMware Movie Decoder before
6.5.3 ...)
- TODO: check
+ NOT-FOR-US: VMware Movie Decoder
CVE-2009-2627 (Insecure method vulnerability in the Acer LunchApp (aka ...)
NOT-FOR-US: Acer LunchApp
CVE-2009-2626
@@ -2132,7 +2132,7 @@
CVE-2009-2520
RESERVED
CVE-2009-2519 (The DHTML Editing Component ActiveX control in Microsoft Windows
2000 ...)
- TODO: check
+ NOT-FOR-US: Microsoft Windows
CVE-2009-2518
RESERVED
CVE-2009-2517
@@ -2172,9 +2172,9 @@
CVE-2009-2500
RESERVED
CVE-2009-2499 (Microsoft Windows Media Format Runtime 9.0, 9.5, and 11; and
Microsoft ...)
- TODO: check
+ NOT-FOR-US: Microsoft Windows Media Format Runtime
CVE-2009-2498 (Microsoft Windows Media Format Runtime 9.0, 9.5, and 11 and
Windows ...)
- TODO: check
+ NOT-FOR-US: Microsoft Windows Media Format Runtime
CVE-2009-2497
RESERVED
CVE-2009-2496 (Heap-based buffer overflow in the Office Web Components ActiveX
...)
@@ -3712,9 +3712,9 @@
CVE-2009-1927
RESERVED
CVE-2009-1926 (Microsoft Windows 2000 SP4, Server 2003 SP2, Vista Gold, SP1,
and SP2, ...)
- TODO: check
+ NOT-FOR-US: Microsoft Windows
CVE-2009-1925 (The TCP/IP implementation in Microsoft Windows Vista Gold, SP1,
and ...)
- TODO: check
+ NOT-FOR-US: Microsoft Windows Vista Gold
CVE-2009-1924 (Integer overflow in the Windows Internet Name Service (WINS)
component ...)
NOT-FOR-US: Microsoft Windows
CVE-2009-1923 (Heap-based buffer overflow in the Windows Internet Name Service
(WINS) ...)
@@ -3724,7 +3724,7 @@
CVE-2009-1921
RESERVED
CVE-2009-1920 (The JScript scripting engine 5.1, 5.6, 5.7, and 5.8 in
JScript.dll in ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2009-1919 (Microsoft Internet Explorer 5.01 SP4 and 6 SP1; Internet
Explorer 6 ...)
NOT-FOR-US: Microsoft Internet Explorer
CVE-2009-1918 (Microsoft Internet Explorer 5.01 SP4 and 6 SP1; Internet
Explorer 6 ...)
@@ -6380,7 +6380,7 @@
CVE-2009-1133 (Heap-based buffer overflow in Microsoft Remote Desktop
Connection ...)
NOT-FOR-US: Microsoft
CVE-2009-1132 (Heap-based buffer overflow in the Wireless LAN AutoConfig
Service (aka ...)
- TODO: check
+ NOT-FOR-US: Microsoft Windows Vista Gold
CVE-2009-1131 (Multiple stack-based buffer overflows in Microsoft Office
PowerPoint ...)
NOT-FOR-US: Microsoft
CVE-2009-1130 (Heap-based buffer overflow in Microsoft Office PowerPoint 2002
SP3 and ...)
@@ -8506,7 +8506,7 @@
CVE-2009-0628 (Memory leak in the SSLVPN feature in Cisco IOS 12.3 through 12.4
...)
NOT-FOR-US: Cisco IOS
CVE-2009-0627 (Unspecified vulnerability in Cisco NX-OS before 4.0(1a)N2(1),
when ...)
- TODO: check
+ NOT-FOR-US: Cisco NX-OS
CVE-2009-0626 (The SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote
...)
NOT-FOR-US: Cisco IOS
CVE-2009-0625 (Unspecified vulnerability in Cisco ACE Application Control
Engine ...)
@@ -10069,7 +10069,7 @@
{DSA-1880-1}
- openoffice.org 1:3.1.1~ooo310m15-1
CVE-2009-0199 (Heap-based buffer overflow in the VMnc media codec in vmnc.dll
in ...)
- TODO: check
+ NOT-FOR-US: VMware Movie Decoder
CVE-2009-0198 (Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7
and ...)
NOT-FOR-US: Adobe Reader
CVE-2009-0197 (Integer overflow in the FORMATS Plugin before 4.23 for IrfanView
...)