several NFUs, cleaned up some solved moin issues

git-svn-id: svn+ssh://svn.debian.org/svn/secure-testing@14498 e39458fd-73e7-0310-bf30-c45bca0a0e42

7 files changed, 26 insertions, 22 deletions

diff --git a/data/CVE/2000.list b/data/CVE/2000.list
index 911c96aaf6..d67e443ee4 100644
--- a/data/CVE/2000.list
+++ b/data/CVE/2000.list
@@ -1,7 +1,7 @@
 CVE-2000-1246 (NWFTPD.nlm before 5.01o in the FTP server in Novell NetWare 5.1 SP3 ...)
-	TODO: check
+	NOT-FOR-US: Novell NetWare
 CVE-2000-1245 (Multiple unspecified vulnerabilities in NWFTPD.nlm before 5.01o in the ...)
-	TODO: check
+	NOT-FOR-US: Novell NetWare
 CVE-2000-1244 (Computer Associates InoculateIT Agent for Exchange Server does not ...)
 	NOT-FOR-US: Exchange Server
 CVE-2000-1243 (Privacy leak in Dansie Shopping Cart 3.04, and probably earlier ...)
diff --git a/data/CVE/2001.list b/data/CVE/2001.list
index d579b9f588..1406310437 100644
--- a/data/CVE/2001.list
+++ b/data/CVE/2001.list
@@ -1,5 +1,5 @@
 CVE-2001-1587 (NWFTPD.nlm before 5.01w in the FTP server in Novell NetWare allows ...)
-	TODO: check
+	NOT-FOR-US: Novell NetWare
 CVE-2001-1586 (Directory traversal vulnerability in SimpleServer:WWW 1.13 and earlier ...)
 	NOT-FOR-US: Data pre-dating the Security Tracker
 CVE-2001-1585 (SSH protocol 2 (aka SSH-2) public key authentication in the ...)
diff --git a/data/CVE/2002.list b/data/CVE/2002.list
index e7a3d51082..3ba8e82013 100644
--- a/data/CVE/2002.list
+++ b/data/CVE/2002.list
@@ -1,9 +1,9 @@
 CVE-2002-2434 (NWFTPD.nlm before 5.02i in the FTP server in Novell NetWare does not ...)
-	TODO: check
+	NOT-FOR-US: Novell NetWare
 CVE-2002-2433 (NWFTPD.nlm before 5.03b in the FTP server in Novell NetWare allows ...)
-	TODO: check
+	NOT-FOR-US: Novell NetWare
 CVE-2002-2432 (Unspecified vulnerability in NWFTPD.nlm before 5.03b in the FTP server ...)
-	TODO: check
+	NOT-FOR-US: Novell NetWare
 CVE-2002-2431 (Unspecified vulnerability in GoAhead WebServer before 2.1.4 allows ...)
 	NOT-FOR-US: GoAhead WebServer
 CVE-2002-2430 (GoAhead WebServer before 2.1.1 allows remote attackers to cause a ...)
diff --git a/data/CVE/2003.list b/data/CVE/2003.list
index c3c44f7787..2423e17ca1 100644
--- a/data/CVE/2003.list
+++ b/data/CVE/2003.list
@@ -1,15 +1,15 @@
 CVE-2003-1596 (NWFTPD.nlm before 5.03.12 in the FTP server in Novell NetWare does not ...)
-	TODO: check
+	NOT-FOR-US: Novell NetWare
 CVE-2003-1595 (NWFTPD.nlm before 5.04.05 in the FTP server in Novell NetWare 6.5 does ...)
-	TODO: check
+	NOT-FOR-US: Novell NetWare
 CVE-2003-1594 (NWFTPD.nlm before 5.04.05 in the FTP server in Novell NetWare 6.5 does ...)
-	TODO: check
+	NOT-FOR-US: Novell NetWare
 CVE-2003-1593 (NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 ...)
-	TODO: check
+	NOT-FOR-US: Novell NetWare
 CVE-2003-1592 (Multiple buffer overflows in NWFTPD.nlm in the FTP server in Novell ...)
-	TODO: check
+	NOT-FOR-US: Novell NetWare
 CVE-2003-1591 (NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 ...)
-	TODO: check
+	NOT-FOR-US: Novell NetWare
 CVE-2003-1590 (Unspecified vulnerability in Sun ONE (aka iPlanet) Web Server 6.0 SP3 ...)
 	NOT-FOR-US: Sun ONE Web Server
 CVE-2003-1589 (Unspecified vulnerability in Sun ONE (aka iPlanet) Web Server 4.1 ...)
diff --git a/data/CVE/2004.list b/data/CVE/2004.list
index 781c85e576..65ed3a2910 100644
--- a/data/CVE/2004.list
+++ b/data/CVE/2004.list
@@ -1,5 +1,5 @@
 CVE-2004-2767 (NWFTPD.nlm before 5.04.25 in the FTP server in Novell NetWare does not ...)
-	TODO: check
+	NOT-FOR-US: Novell NetWare
 CVE-2004-2766 (Webmail in Sun ONE Messaging Server 6.1 and iPlanet Messaging Server ...)
 	NOT-FOR-US: iPlanet Messaging Server/Sun ONE Messaging Server
 CVE-2004-2765 (Cross-site scripting (XSS) vulnerability in Webmail in Sun ONE ...)
diff --git a/data/CVE/2009.list b/data/CVE/2009.list
index 80288ceb11..bfd21db444 100644
--- a/data/CVE/2009.list
+++ b/data/CVE/2009.list
@@ -7,7 +7,9 @@ CVE-2009-4764 (Adobe Reader 8.x and 9.x on Windows is able to execute EXE files
 CVE-2009-4763 (Unspecified vulnerability in the ClickHeat plugin, as used in ...)
 	NOT-FOR-US: ClickHeat plugin
 CVE-2009-4762 (MoinMoin 1.7.x before 1.7.3 and 1.8.x before 1.8.3 checks parent ACLs ...)
-	TODO: check
+	- moin 1.9.2-1 (bug #569975; medium)
+	[lenny] - moin 1.7.1-3+lenny3 (bug #569975; medium)
+	NOTE: see http://www.debian.org/security/2010/dsa-2014
 CVE-2009-4761 (Stack-based buffer overflow in Mini-stream RM Downloader allows remote ...)
 	NOT-FOR-US: Mini-stream RM Downloader
 CVE-2009-4760 (Winn ASP Guestbook 1.01 Beta stores sensitive information under the ...)
diff --git a/data/CVE/2010.list b/data/CVE/2010.list
index 5414a1ba0b..6a54ef13ad 100644
--- a/data/CVE/2010.list
+++ b/data/CVE/2010.list
@@ -117,7 +117,7 @@ CVE-2010-1318
 CVE-2010-1317
 	RESERVED
 CVE-2010-1316 (Multiple stack-based buffer overflows in Tembria Server Monitor before ...)
-	TODO: check
+	NOT-FOR-US: Tembria Server Monitor
 CVE-2010-1315 (Directory traversal vulnerability in weberpcustomer.php in the ...)
 	NOT-FOR-US: Joomla!
 CVE-2010-1314 (Directory traversal vulnerability in the Highslide JS (com_hsconfig) ...)
@@ -300,13 +300,15 @@ CVE-2010-1243 (The IBM Web Interface for Content Management (aka WEBi) before 1.
 CVE-2010-1242 (Multiple cross-site scripting (XSS) vulnerabilities in the IBM Web ...)
 	NOT-FOR-US: IBM Web Interface for Content Management
 CVE-2010-1241 (Heap-based buffer overflow in the custom heap management system in ...)
-	TODO: check
+	NOT-FOR-US: Acrobat Reader
 CVE-2010-1240 (Adobe Reader 9.3.1 on Windows does not restrict the contents of one ...)
 	NOT-FOR-US: Adobe Reader
 CVE-2010-1239 (Foxit Reader before 3.2.1.0401 allows remote attackers to (1) execute ...)
 	NOT-FOR-US: Foxit Reader
 CVE-2010-1238 (MoinMoin 1.7.1 allows remote attackers to bypass the textcha ...)
-	TODO: check
+	- moin 1.9.2-3 (bug #575995; medium)
+	[lenny] - moin 1.7.1-3+lenny4 (bug #575995; medium)
+	NOTE: see http://www.debian.org/security/2010/dsa-2024
 CVE-2010-1237 (Google Chrome 4.1 BETA before 4.1.249.1036 allows remote attackers to ...)
 	- webkit 1.1.90-1
 	- kdelibs <undetermined>
@@ -540,15 +542,15 @@ CVE-2010-0751 (The ip_evictor function in ip_fragment.c in libnids 1.24, as used
 CVE-2010-1143
 	RESERVED
 CVE-2010-1142 (VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; ...)
-	TODO: check
+   NOT-FOR-US: VMware products
 CVE-2010-1141 (VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; ...)
-	TODO: check
+   NOT-FOR-US: VMware products
 CVE-2010-1140 (The USB service in VMware Workstation 7.0 before 7.0.1 build 227600 ...)
-	TODO: check
+   NOT-FOR-US: VMware products
 CVE-2010-1139 (Format string vulnerability in vmrun in VMware VIX API 1.6.x, VMware ...)
-	TODO: check
+   NOT-FOR-US: VMware products
 CVE-2010-1138 (The virtual networking stack in VMware Workstation 7.0 before 7.0.1 ...)
-	TODO: check
+   NOT-FOR-US: VMware products
 CVE-2010-1137 (Cross-site scripting (XSS) vulnerability in WebAccess in VMware ...)
 	NOT-FOR-US: VMware Server
 CVE-2010-1136 (The Standard Remember method in TikiWiki CMS/Groupware 3.x before 3.5 ...)