[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Information-technology Promotion Agency (JP) using several example CVEs (fwd)

To: CVE Editorial Board <cve-editorial-board-list@lists.mitre.org>
Subject: Information-technology Promotion Agency (JP) using several example CVEs (fwd)
From: jericho <jericho@attrition.org>
Date: Fri, 2 Jun 2017 12:03:59 -0500
Authentication-results: spf=none (sender IP is 129.83.29.3) smtp.mailfrom=LISTS.MITRE.ORG; mitre.mail.onmicrosoft.com; dkim=none (message not signed) header.d=none;mitre.mail.onmicrosoft.com; dmarc=none action=none header.from=attrition.org;
Delivery-date: Fri Jun 2 16:57:16 2017
Importance: high
List-help: <mailto:LISTSERV@LISTS.MITRE.ORG?body=INFO%20CVE-EDITORIAL-BOARD-LIST>
List-owner: <mailto:CVE-EDITORIAL-BOARD-LIST-request@LISTS.MITRE.ORG>
List-subscribe: <mailto:CVE-EDITORIAL-BOARD-LIST-subscribe-request@LISTS.MITRE.ORG>
List-unsubscribe: <mailto:CVE-EDITORIAL-BOARD-LIST-unsubscribe-request@LISTS.MITRE.ORG>
Sender: <owner-cve-editorial-board-list@lists.mitre.org>
Spamdiagnosticmetadata: 6cdb8bfc89744bd8bfee511e3e65aa05
Spamdiagnosticoutput: 1:2
User-agent: Alpine 2.00 (LNX 1167 2008-08-23)

Suggestion:

Starting in 2018, reserve common 'example' CVEs like this for a given yearto help avoid collisions since the example may be used long before a validassignment. Hard to predict what people will use as an example, but Iwould add -1234 and -12345 to this. I've sent several of these types ofexamples to MITRE in the past. They should be able to generate a morecomplete list.


.b

---------- Forwarded message ----------
From: jericho <jericho@attrition.org>
To: CVE <cve@mitre.org>
Date: Wed, 17 May 2017 17:04:07 -0500 (CDT)

Subject: Information-technology Promotion Agency (JP) using several exampleCVEs



FYI

https://www.ipa.go.jp/files/000058610.pdf

Slide 37:

CVE-2017-1000
CVE-2017-10000
CVE-2017-1000000

Follow-Ups:
- Re: Information-technology Promotion Agency (JP) using several example CVEs (fwd)
  - From: Kurt Seifried <kurt@seifried.org>

Next by Date: Re: Information-technology Promotion Agency (JP) using several example CVEs (fwd)
Next by thread: Re: Information-technology Promotion Agency (JP) using several example CVEs (fwd)
Index(es):
- Date
- Thread