CVE-2017-7269 and abandonware

• To: "cve-editorial-board-list@lists.mitre.org" <cve-editorial-board-list@LISTS.MITRE.ORG>
• Subject: CVE-2017-7269 and abandonware
• From: Art Manion <amanion@cert.org>
• Date: Thu, 30 Mar 2017 09:52:17 -0400
• Authentication-results: spf=none (sender IP is 129.83.29.2) smtp.mailfrom=LISTS.MITRE.ORG; mitre.mail.onmicrosoft.com; dkim=none (message not signed) header.d=none;mitre.mail.onmicrosoft.com; dmarc=none action=none header.from=cert.org;
• Delivery-date: Thu Mar 30 10:50:47 2017
• Dkim-filter: OpenDKIM Filter v2.11.0 veto.sei.cmu.edu v2UDqN22039629
• List-help: <mailto:LISTSERV@LISTS.MITRE.ORG?body=INFO%20CVE-EDITORIAL-BOARD-LIST>
• List-owner: <mailto:CVE-EDITORIAL-BOARD-LIST-request@LISTS.MITRE.ORG>
• List-subscribe: <mailto:CVE-EDITORIAL-BOARD-LIST-subscribe-request@LISTS.MITRE.ORG>
• List-unsubscribe: <mailto:CVE-EDITORIAL-BOARD-LIST-unsubscribe-request@LISTS.MITRE.ORG>
• Sender: <owner-cve-editorial-board-list@lists.mitre.org>
• Spamdiagnosticmetadata: 6cdb8bfc89744bd8bfee511e3e65aa05
• Spamdiagnosticoutput: 1:2
• User-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:45.0) Gecko/20100101 Thunderbird/45.8.0

Who issued CVE-2017-7269 (IIS 6 WebDAV vulnerability)?

  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7269

What are the assignment rules for abandonware (or unsupportedware)?

Is the vendor CNA primarily responsible, if one exists?

Next, is it up to a more generic CNA like MITRE, DWF, CERT/CC, 
JPCERT/CC?


 - Art

• Follow-Ups:
  • Re: CVE-2017-7269 and abandonware
    • From: "Landfield, Kent B" <kent.b.landfield@intel.com>

• Prev by Date: Re: CVE/CNA coverage
• Next by Date: RE: CVE/CNA coverage
• Previous by thread: Re: CVE/CNA coverage
• Next by thread: Re: CVE-2017-7269 and abandonware
• Index(es):
  • Date
  • Thread