PROPOSAL: Cluster 35 - SA-ATTACK (10 candidates)

["Steven M. Christey" <coley@linus.mitre.org>]

The following SA category candidates identify services that are common
attack points.

- Steve



Summary of votes to use (in ascending order of "severity"):

ACCEPT - member accepts the candidate as proposed
NOOP - member has no opinion on the candidate
MODIFY - member wants to change some minor detail (e.g. reference/description)
REVIEWING - member is reviewing/researching the candidate
RECAST - candidate must be significantly modified, e.g. split or merged
REJECT - candidate is "not a vulnerability", or a duplicate, etc.

Please write your vote on the line that starts with "VOTE: ".  If you
want to add comments or details, add them to lines after the VOTE: line.


=================================
Candidate: CAN-1999-0615
Published:
Final-Decision:
Interim-Decision:
Modified:
Announced: 19990804
Assigned: 19990607
Category: SA

The SNMP service is running.

VOTE:

=================================
Candidate: CAN-1999-0620
Published:
Final-Decision:
Interim-Decision:
Modified:
Announced: 19990804
Assigned: 19990607
Category: SA

A component service related to NIS is running.

VOTE:

=================================
Candidate: CAN-1999-0630
Published:
Final-Decision:
Interim-Decision:
Modified:
Announced: 19990804
Assigned: 19990607
Category: SA

The NT Alerter and Messenger services are running.

VOTE:

=================================
Candidate: CAN-1999-0633
Published:
Final-Decision:
Interim-Decision:
Modified:
Announced: 19990804
Assigned: 19990607
Category: SA

The HTTP/WWW service is running.

VOTE:

=================================
Candidate: CAN-1999-0641
Published:
Final-Decision:
Interim-Decision:
Modified:
Announced: 19990804
Assigned: 19990607
Category: SA

The UUCP service is running.

VOTE:

=================================
Candidate: CAN-1999-0645
Published:
Final-Decision:
Interim-Decision:
Modified:
Announced: 19990804
Assigned: 19990607
Category: SA

The IRC service is running.

VOTE:

=================================
Candidate: CAN-1999-0646
Published:
Final-Decision:
Interim-Decision:
Modified:
Announced: 19990804
Assigned: 19990607
Category: SA

The LDAP service is running.

VOTE:

=================================
Candidate: CAN-1999-0651
Published:
Final-Decision:
Interim-Decision:
Modified:
Announced: 19990804
Assigned: 19990607
Category: SA

The rsh/rlogin service is running.

VOTE:

=================================
Candidate: CAN-1999-0653
Published:
Final-Decision:
Interim-Decision:
Modified:
Announced: 19990804
Assigned: 19990607
Category: SA

A component service related to NIS+ is running.

VOTE:

=================================
Candidate: CAN-1999-0659
Published:
Final-Decision:
Interim-Decision:
Modified:
Announced: 19990804
Assigned: 19990607
Category: SA

A Windows NT Primary Domain Controller (PDC) or Backup Domain
Controller (BDC) is present.

VOTE: