Author: alec-guest
Date: 2007-07-06 15:43:30 +0000 (Fri, 06 Jul 2007)
New Revision: 6100
Modified:
data/CVE/list
Log:
NFUs
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2007-07-06 15:38:37 UTC (rev 6099)
+++ data/CVE/list 2007-07-06 15:43:30 UTC (rev 6100)
@@ -37,7 +37,7 @@
CVE-2007-3498 (Cross-site scripting (XSS) vulnerability in
smoketests/configForm.php ...)
NOT-FOR-US: HTML Purifier
CVE-2007-3497 (Microsoft Internet Explorer 7 allows remote attackers to
determine the ...)
- TODO: check
+ NOT-FOR-US: Microsoft Internet Explorer
CVE-2007-3496 (Cross-site scripting (XSS) vulnerability in SAP Web Dynpro Java
...)
NOT-FOR-US: SAP Web Dynpro Java
CVE-2007-3495 (Multiple cross-site scripting (XSS) vulnerabilities in the SAP
...)
@@ -45,19 +45,19 @@
CVE-2007-3494 (Papoo CMS 3.6, and possibly earlier, does not verify user
privileges ...)
NOT-FOR-US: Papoo CMS
CVE-2007-3493 (A certain ActiveX control in NCTWavChunksEditor2.dll 2.6.1.148
in ...)
- TODO: check
+ NOT-FOR-US: NCTAudioStudio
CVE-2007-3492 (Conti FtpServer 1.0 allows remote authenticated users to cause
a ...)
NOT-FOR-US: Conti FtpServer
CVE-2007-3491 (Buffer overflow in _mprosrv in Progress Software OpenEdge
before ...)
NOT-FOR-US: Progress Software OpenEdge
CVE-2007-3490 (Unspecified vulnerability in Microsoft Excel 2003 SP2 allows
remote ...)
- TODO: check
+ NOT-FOR-US: Microsoft Excel 2003 SP2
CVE-2007-3489 (Cross-site request forgery (CSRF) vulnerability in
pop/WizU.html in ...)
NOT-FOR-US: Check Point VPN-1 Edge X
CVE-2007-3488 (Heap-based buffer overflow in the viewer ActiveX control in
Sony ...)
- TODO: check
+ NOT-FOR-US: Sony Network Camera SNC-P5 1.0
CVE-2007-3487 (Absolute directory traversal in a certain ActiveX control in
...)
- TODO: check
+ NOT-FOR-US: Hewlett-Packard (HP) Photo Digital Imaging ActiveX control
CVE-2007-3486 (Cross-site scripting (XSS) vulnerability in AltaVista search
engine ...)
NOT-FOR-US: AltaVista
CVE-2007-3485 (Multiple cross-site scripting (XSS) vulnerabilities in
Yandex.Server ...)
@@ -69,7 +69,7 @@
CVE-2007-3482 (Cross-domain vulnerability in Apple Safari allows remote
attackers to ...)
NOT-FOR-US: Apple Safari
CVE-2007-3481 (Cross-domain vulnerability in Microsoft Internet Explorer
allows ...)
- TODO: check
+ NOT-FOR-US: Microsoft Internet Explorer
CVE-2007-3480 (PCSoft WinDEV 11 (01F110053p) allows user-assisted remote
attackers to ...)
NOT-FOR-US: PCSoft WinDEV
CVE-2007-3479 (Stack-based buffer overflow in PCSoft WinDEV 11 (01F110053p)
allows ...)
@@ -112,7 +112,7 @@
CVE-2007-3464 (Check Point SofaWare [EMAIL PROTECTED], with firmware before
Embedded NGX ...)
NOT-FOR-US: Check Point SofaWare Safe
CVE-2007-3463 (** DISPUTED ** ...)
- TODO: check
+ NOT-FOR-US: Microsoft Windows XP SP2
CVE-2007-3462 (Cross-site request forgery (CSRF) vulnerability in Check Point
...)
NOT-FOR-US: Check Point SofaWare Safe
CVE-2007-3461 (SQL injection vulnerability in property.php in elkagroup Image
Gallery ...)
@@ -120,7 +120,7 @@
CVE-2007-3460 (Multiple PHP remote file inclusion vulnerabilities in
index.php3 in ...)
NOT-FOR-US: EVA-Web
CVE-2007-3459 (A certain ActiveX control in Avaxswf.dll 1.0.0.1 in Civitech
Avax ...)
- TODO: check
+ NOT-FOR-US: Civitech Avax Vector
CVE-2007-3458 (The libsldap library in Sun Solaris 8, 9, and 10 allows local
users to ...)
NOT-FOR-US: Sun Solaris libsldap
CVE-2007-3457
_______________________________________________
Secure-testing-commits mailing list
[email protected]
http://lists.alioth.debian.org/mailman/listinfo/secure-testing-commits