Author: jamie-guest
Date: 2009-01-05 22:56:33 +0000 (Mon, 05 Jan 2009)
New Revision: 10863
Modified:
data/CVE/list
Log:
NOT-FOR-US updates
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2009-01-05 21:27:30 UTC (rev 10862)
+++ data/CVE/list 2009-01-05 22:56:33 UTC (rev 10863)
@@ -1,3 +1,11 @@
+CVE-2008-5841
+ NOT-FOR-US: iGaming
+CVE-2008-5840
+ NOT-FOR-US: PHP iCalendar
+CVE-2008-5839
+ NOT-FOR-US: Foxmail
+CVE-2008-5838
+ NOT-FOR-US: E-Php Scripts E-Shop Shopping Cart
CVE-2008-5837
RESERVED
CVE-2008-5836
@@ -29,7 +37,7 @@
CVE-2008-5822 (Memory leak in Libxul, as used in Mozilla Firefox 3.0.5 and
other ...)
TODO: check
CVE-2008-5821 (Memory leak in WebKit.dll in WebKit, as used by Apple Safari
3.2 on ...)
- TODO: check
+ NOT-FOR-US: Webkit on Windows
CVE-2008-5820 (SQL injection vulnerability in eDNews_view.php in eDreamers
eDNews 2 ...)
NOT-FOR-US: eDreamers eDNews
CVE-2008-5819 (Directory traversal vulnerability in eDNews_archive.php in
eDreamers ...)
@@ -203,7 +211,7 @@
CVE-2008-5737 (SQL injection vulnerability in index.php in Nodstrum MySQL
Calendar ...)
NOT-FOR-US: Nodstrum MySQL Calendar
CVE-2008-5736 (Multiple unspecified vulnerabilities in FreeBSD 6 before
6.4-STABLE, ...)
- TODO: check
+ NOT-FOR-US: FreeBSD
CVE-2008-5735 (Stack-based buffer overflow in skin.c in CoolPlayer 2.17
through 2.19 ...)
NOT-FOR-US: CoolPlayer
CVE-2008-5734 (Cross-site scripting (XSS) vulnerability in WebMail Pro in
IceWarp ...)
@@ -3583,11 +3591,11 @@
{DSA-1670-1}
- enscript 1.6.4-13 (bug #506261)
CVE-2008-4305 (Static code injection vulnerability in installation/setup.php
in ...)
- TODO: check
+ NOT-FOR-US: phpCollab
CVE-2008-4304 (general/login.php in phpCollab 2.5 rc3 and earlier allows
remote ...)
- TODO: check
+ NOT-FOR-US: phpCollab
CVE-2008-4303 (Multiple SQL injection vulnerabilities in phpCollab 2.5 rc3,
2.4, and ...)
- TODO: check
+ NOT-FOR-US: phpCollab
CVE-2008-4302 (fs/splice.c in the splice subsystem in the Linux kernel before
...)
{DSA-1653-1}
- linux-2.6 2.6.22-4 (low)
@@ -8115,9 +8123,9 @@
CVE-2008-2436 (Multiple heap-based buffer overflows in the IppCreateServerRef
...)
NOT-FOR-US: Novell iPrint Client
CVE-2008-2435 (Use-after-free vulnerability in the Trend Micro HouseCall
ActiveX ...)
- TODO: check
+ NOT-FOR-US: ActiveX
CVE-2008-2434 (The Trend Micro HouseCall ActiveX control 6.51.0.1028 and
6.6.0.1278 ...)
- TODO: check
+ NOT-FOR-US: ActiveX
CVE-2008-2433 (The web management console in Trend Micro OfficeScan 7.0
through 8.0, ...)
NOT-FOR-US: Trend Micro OfficeScan
CVE-2008-2432 (Insecure method vulnerability in the GetFileList method in an
...)
_______________________________________________
Secure-testing-commits mailing list
[email protected]
http://lists.alioth.debian.org/mailman/listinfo/secure-testing-commits
