Re: CVE Promotions and invalid IDs
Vincent Renardias <[email protected]>
| Newsgroups | gmane.comp.security.nessus.devel |
|---|---|
| Message-ID | <[email protected]> |
On Wed, 2003-03-19 at 19:11, Thomas Reinke wrote: I've just commited the whole list. Thanks. > The following scripts need to be adjusted for CVE identifiers. > > Promotion - these scripts refer to a CAN-xxxx-xxxx id, when they > should in fact reference a CVE-xxxx-xxx id. > > cfinger_format_bug.nasl CAN-1999-0708 > codered_x.nasl CAN-2001-0500 > ftp_servu_path_disclosure.nasl CAN-1999-0838 > iis_isapi_overflow.nasl CAN-2001-0506 > iis_isapi_overflow.nasl CAN-2001-0508 > irix_copilot.nasl CAN-2000-0283 > mcms_overflow.nasl CAN-2002-0050 > mountd_overflow.nasl CAN-1999-0002 > ms_telnet_overflow.nasl CAN-2002-0020 > nfs_dotdot.nasl CAN-1999-0166 > nfs_fsirand.nasl CAN-1999-0167 > nfs_mount.nasl CAN-1999-0170 > nfs_portmap.nasl CAN-1999-0168 > smb_nt_ms00-035.nasl CAN-2000-0402 > smb_nt_ms02-021.nasl CAN-2002-1056 > tcp_seq.nasl CAN-1999-0077 > > The following scripts refer to CVE identifiers that do not > exist. In all cases except for the obvious 'CA-2002-08', > these should have been CAN-XXXX-XXXX references instead > of CVE references. > > bind_sig_cached_rr_overflow.nasl CVE-2002-1219 > CSCdw33027.nasl CVE-2002-1024 > iis_webdav_overflow.nasl CVE-2003-0109 > mssmtp_null_auth.nasl CVE-2002-0054 > mssql_blank_password.nasl CVE-2000-1209 > mssql_saphire_worm.nasl CVE-2002-0649 > mssql_saphire_worm.nasl CVE-2002-0650 > oracle9i_owautil.nasl CA-2002-08 > pop3_overflow.nasl CVE-2002-0799 > popper_mod.nasl CVE-2002-0513 > rpc_cmsd.nasl CVE-2002-0391 > rpc_dmispd.nasl CVE-2002-0391 > smb_nt_ms02-013.nasl CVE-2002-0058 > texis_path_disclosure.nasl CVE-2002-0266 > wu_ftpd_glob.nasl CVE-2001-0935 > > Thomas >