Author: nion
Date: 2008-02-11 21:55:53 +0000 (Mon, 11 Feb 2008)
New Revision: 8138

Modified:
   data/CVE/list
Log:
NFUs
CVE-2008-0657 fixed in sun-java6 6-02-1, sun-java5 1.5.0-14-1
deluge-torrent cveified


Modified: data/CVE/list
===================================================================
--- data/CVE/list       2008-02-11 21:14:09 UTC (rev 8137)
+++ data/CVE/list       2008-02-11 21:55:53 UTC (rev 8138)
@@ -1,41 +1,43 @@
 CVE-2008-0663 (Novell Challenge Response Client (LCM) 2.7.5 and earlier, as 
used with ...)
-       TODO: check
+       NOT-FOR-US: Novell Challenge Response Client
 CVE-2008-0662 (The Auto Local Logon feature in Check Point VPN-1 ...)
-       TODO: check
+       NOT-FOR-US: SecuRemote/SecureClient NGX R60 and R56
 CVE-2008-0661 (Buffer overflow in dBpowerAMP Audio Player Release 2 allows 
remote ...)
-       TODO: check
+       NOT-FOR-US: dBpowerAMP Audio Player
 CVE-2008-0660 (Multiple stack-based buffer overflows in Aurigma Image Uploader 
...)
-       TODO: check
+       NOT-FOR-US: Aurigma Image Uploader
 CVE-2008-0659 (Stack-based buffer overflow in Aurigma Image Uploader ActiveX 
control ...)
-       TODO: check
+       NOT-FOR-US: Aurigma Image Uploader
 CVE-2008-0658
        RESERVED
 CVE-2008-0657 (Multiple unspecified vulnerabilities in the Java Runtime 
Environment ...)
-       TODO: check
+       - sun-java6 6-02-1
+       - sun-java5 1.5.0-14-1
+       [etch] - sun-java5 <no-dsa> (Non-free not supported)
 CVE-2008-0656 (Unrestricted file upload vulnerability in dmclTrace.jsp in EMC 
...)
-       TODO: check
+       NOT-FOR-US: Documentum Administrator and Webtop
 CVE-2008-0655 (Multiple unspecified vulnerabilities in Adobe Reader before 
8.1.2 have ...)
-       TODO: check
+       NOT-FOR-US: Adobe Reader
 CVE-2008-0654 (Multiple directory traversal vulnerabilities in Azucar CMS 1.3 
allow ...)
-       TODO: check
+       NOT-FOR-US: Azucar CMS
 CVE-2008-0653 (SQL injection vulnerability in index.php in the Ynews 
(com_ynews) ...)
-       TODO: check
+       NOT-FOR-US: Ynews component for Joomla!
 CVE-2008-0652 (SQL injection vulnerability in index.php in the Downloads ...)
-       TODO: check
+       NOT-FOR-US: Downloads for Mambo and Joomla!
 CVE-2008-0651 (SQL injection vulnerability in login.php in Pedro Santana 
Codice CMS ...)
-       TODO: check
+       NOT-FOR-US: Pedro Santana Codice CMS
 CVE-2008-0650 (SQL injection vulnerability in login.php in Simple OS CMS 0.1c 
beta ...)
-       TODO: check
+       NOT-FOR-US: Simple OS CMS
 CVE-2008-0649 (SQL injection vulnerability in detail.php in Astanda Directory 
Project ...)
-       TODO: check
+       NOT-FOR-US: Astanda Directory Project
 CVE-2008-0648 (Multiple PHP remote file inclusion vulnerabilities in 
OpenSiteAdmin ...)
-       TODO: check
+       NOT-FOR-US: OpenSiteAdmin
 CVE-2008-0647 (Multiple stack-based buffer overflows in the ...)
-       TODO: check
+       NOT-FOR-US: Ourgame GLWorld
 CVE-2008-0646 (The bdecode_recursive function in 
include/libtorrent/bencode.hpp in ...)
-       TODO: check
+       - deluge-torrent 0.5.8.3-1 (unknown; bug #463357)
 CVE-2008-0645 (Multiple PHP remote file inclusion vulnerabilities in Portail 
Web Php ...)
-       TODO: check
+       NOT-FOR-US: Portail Web Php
 CVE-2008-0644
        RESERVED
 CVE-2008-0643
@@ -375,8 +377,6 @@
        {DSA-1492-1}
        - wml 2.0.11-3.1 (low; bug #463907)
        [sarge] - wml <not-affected> (Vulnerable code is patched to use mkdtemp)
-CVE-2008-XXXX [deluge-torrent unspecified remote issue]
-       - deluge-torrent 0.5.8.3-1 (unknown; bug #463357)
 CVE-2008-0501 (Directory traversal vulnerability in phpMyClub 0.0.1 allows 
remote ...)
        NOT-FOR-US: phpMyClub
 CVE-2008-0500 (Multiple unspecified vulnerabilities in Mambo LaiThai 4.5.5 
have ...)


_______________________________________________
Secure-testing-commits mailing list
[email protected]
http://lists.alioth.debian.org/mailman/listinfo/secure-testing-commits

Reply via email to