Re: CVE Promotions and invalid IDs

Vincent Renardias <[email protected]>
Newsgroups gmane.comp.security.nessus.devel
Message-ID <[email protected]>
On Wed, 2003-03-19 at 19:11, Thomas Reinke wrote:

I've just commited the whole list. Thanks.

> The following scripts need to be adjusted for CVE identifiers.
> 
> Promotion - these scripts refer to a CAN-xxxx-xxxx id, when they
> should in fact reference a CVE-xxxx-xxx id.
> 
> cfinger_format_bug.nasl                  CAN-1999-0708
> codered_x.nasl                           CAN-2001-0500
> ftp_servu_path_disclosure.nasl           CAN-1999-0838
> iis_isapi_overflow.nasl                  CAN-2001-0506
> iis_isapi_overflow.nasl                  CAN-2001-0508
> irix_copilot.nasl                        CAN-2000-0283
> mcms_overflow.nasl                       CAN-2002-0050
> mountd_overflow.nasl                     CAN-1999-0002
> ms_telnet_overflow.nasl                  CAN-2002-0020
> nfs_dotdot.nasl                          CAN-1999-0166
> nfs_fsirand.nasl                         CAN-1999-0167
> nfs_mount.nasl                           CAN-1999-0170
> nfs_portmap.nasl                         CAN-1999-0168
> smb_nt_ms00-035.nasl                     CAN-2000-0402
> smb_nt_ms02-021.nasl                     CAN-2002-1056
> tcp_seq.nasl                             CAN-1999-0077
> 
> The following scripts refer to CVE identifiers that do not
> exist. In all cases except for the obvious 'CA-2002-08',
> these should have been CAN-XXXX-XXXX references instead
> of CVE references.
> 
> bind_sig_cached_rr_overflow.nasl         CVE-2002-1219
> CSCdw33027.nasl                          CVE-2002-1024
> iis_webdav_overflow.nasl                 CVE-2003-0109
> mssmtp_null_auth.nasl                    CVE-2002-0054
> mssql_blank_password.nasl                CVE-2000-1209
> mssql_saphire_worm.nasl                  CVE-2002-0649
> mssql_saphire_worm.nasl                  CVE-2002-0650
> oracle9i_owautil.nasl                    CA-2002-08
> pop3_overflow.nasl                       CVE-2002-0799
> popper_mod.nasl                          CVE-2002-0513
> rpc_cmsd.nasl                            CVE-2002-0391
> rpc_dmispd.nasl                          CVE-2002-0391
> smb_nt_ms02-013.nasl                     CVE-2002-0058
> texis_path_disclosure.nasl               CVE-2002-0266
> wu_ftpd_glob.nasl                        CVE-2001-0935
> 
> Thomas
>
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.