Author: jmm
Date: 2012-04-07 12:54:50 +0000 (Sat, 07 Apr 2012)
New Revision: 18864
Modified:
data/CVE/list
Log:
new inspircd issue
NFUs
Modified: data/CVE/list
==================================================================---
data/CVE/list 2012-04-07 09:59:30 UTC (rev 18863)
+++ data/CVE/list 2012-04-07 12:54:50 UTC (rev 18864)
@@ -309,11 +309,11 @@
CVE-2012-2056
RESERVED
CVE-2008-7311 (The session cookie store implementation in Spree 0.2.0 uses a
...)
- TODO: check
+ NOT-FOR-US: Spree
CVE-2008-7310 (Spree 0.2.0 does not properly restrict the use of a hash to
provide ...)
- TODO: check
+ NOT-FOR-US: Spree
CVE-2008-7309 (Insoshi before 20080920 does not properly restrict the use of a
hash ...)
- TODO: check
+ NOT-FOR-US: Insoshi
CVE-2012-2055 (GitHub Enterprise before 20120304 does not properly restrict the
use ...)
NOT-FOR-US: GitHub Enterprise
CVE-2012-2054 (Redmine before 1.3.2 does not properly restrict the use of a
hash to ...)
@@ -770,7 +770,7 @@
CVE-2012-1837 (The (1) webreports, (2) post/create-role, and (3)
post/update-role ...)
NOT-FOR-US: Tivoli
CVE-2012-1836 (Heap-based buffer overflow in dns.cpp in InspIRCd 2.0.5 might
allow ...)
- TODO: check
+ - inspircd <unfixed>
CVE-2012-1835
RESERVED
CVE-2012-1834
@@ -1839,11 +1839,11 @@
CVE-2012-1338
RESERVED
CVE-2012-1337 (Buffer overflow in the Cisco WebEx Recording Format (WRF) player
T27 L ...)
- TODO: check
+ NOT-FOR-US: Cisco WebEx
CVE-2012-1336 (Buffer overflow in the Cisco WebEx Recording Format (WRF) player
T27 L ...)
- TODO: check
+ NOT-FOR-US: Cisco WebEx
CVE-2012-1335 (Buffer overflow in the Cisco WebEx Recording Format (WRF) player
T27 L ...)
- TODO: check
+ NOT-FOR-US: Cisco WebEx
CVE-2012-1334
RESERVED
CVE-2012-1333
@@ -2486,7 +2486,7 @@
{DSA-2443-1}
- linux-2.6 3.2.10-1
CVE-2012-1089 (Directory traversal vulnerability in Apache Wicket 1.4.x before
1.4.20 ...)
- TODO: check
+ NOT-FOR-US: Apache Wicket
CVE-2012-1088
RESERVED
CVE-2012-1087 (Cross-site scripting (XSS) vulnerability in the Post data
records to ...)
@@ -3183,7 +3183,6 @@
CVE-2012-0810
RESERVED
- linux-2.6 <unfixed>
- TODO: check
CVE-2012-0809 (Format string vulnerability in the sudo_debug function in Sudo
1.8.0 ...)
- sudo 1.8.3p2-1 (bug #657985)
[squeeze] - sudo <not-affected> (Vulnerable code not present)