Thu Jul 01 15:59:35 GMT 1999

• Re: Survey: Use of Same Attack/Same Codebase content decision in VDB's
  • From: Adam Shostack <adam@netect.com>
• Re: Survey: Use of Same Attack/Same Codebase content decision in VDB's
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• RE: Survey: Use of Same Attack/Same Codebase content decision in VDB's
  • From: "Proctor, Paul" <paul.proctor@centraxcorp.com>
• Re: Survey: Use of Same Attack/Same Codebase content decision in VDB's
  • From: Aleph One <aleph1@underground.org>
• CVE Interim Review meeting at Black Hat - July 7th?
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Administrivia
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• ** TEST **
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• List configuration question: Reply to Sender, or to List?
  • From: "Steven M. Christey" <coley@linus.mitre.org>

Fri Jul 02 03:06:46 GMT 1999

• Re: Survey: Use of Same Attack/Same Codebase content decision in VDB's
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Final Decision on Same Attack/Same Codebase to occur next Friday
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• RE: List configuration question: Reply to Sender, or to List?
  • From: "Prosser, Mike" <mike.prosser@L-3Security.com>

Mon Jul 05 23:11:16 GMT 1999

• FINAL DECISION: ACCEPT 16 candidates from CERT MODIFY-01
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• FINAL DECISION: ACCEPT 3 candidates from CERT cluster
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• FINAL DECISION: ACCEPT 6 candidates from VEN-AIX cluster
  • From: "Steven M. Christey" <coley@linus.mitre.org>

Tue Jul 06 00:02:10 GMT 1999

• FINAL DECISION: ACCEPT 11 candidates from VEN-SUN cluster
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• FINAL DECISION: ACCEPT 6 candidates from VEN-SGI cluster
  • From: "Steven M. Christey" <coley@linus.mitre.org>

Wed Jul 07 01:45:40 GMT 1999

• Re: List configuration question: Reply to Sender, or to List?
  • From: Pascal Meunier <pascalm@cup.hp.com>
• Re: Survey: Use of Same Attack/Same Codebase content decision inVDB's
  • From: Pascal Meunier <pascalm@cup.hp.com>
• RE: Survey: Use of Same Attack/Same Codebase content decision in VDB's
  • From: Russ <Russ.Cooper@rc.on.ca>
• Re: Survey: Use of Same Attack/Same Codebase content decision in VDB's
  • From: William Hill <bill@mitre.org>
• Vendor disclosure to ICSA IDC
  • From: Russ <Russ.Cooper@rc.on.ca>
• Re: Level of Abstraction Issue: Similar Applications, "Same" Vulnerability
  • From: William Hill <bill@mitre.org>
• Re: Survey: Use of Same Attack/Same Codebase content decision in VDB's
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Re: Vendor disclosure to ICSA IDC
  • From: Gene Spafford <spaf@cs.purdue.edu>

Thu Jul 08 00:43:42 GMT 1999

• Re: Level of Abstraction Issue: Similar Applications, "Same" Vulnerability
  • From: Dave Mann <damann@mitre.org>
• Re: Level of Abstraction Issue: Similar Applications, "Same" Vulnerability
  • From: Stuart Staniford-Chen <stuart@silicondefense.com>
• Re: Survey: Use of Same Attack/Same Codebase content decision in VDB's
  • From: Stuart Staniford-Chen <stuart@silicondefense.com>
• Re: Level of Abstraction Issue: Similar Applications, "Same" Vulnerability
  • From: Bill Hill <bill@mitre.org>
• Re: Level of Abstraction Issue: Similar Applications, "Same" Vulnerability
  • From: Bill Hill <bill@mitre.org>
• RE: Level of Abstraction Issue: Similar Applications, "Same" Vulnerability
  • From: Russ <Russ.Cooper@rc.on.ca>
• Re: Level of Abstraction Issue: Similar Applications, "Same" Vulnerability
  • From: Bill Hill <bill@mitre.org>
• Re: Level of Abstraction Issue: Similar Applications, "Same" Vulnerability
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Expediency or Correctness WAS: Level of Abstraction
  • From: Dave Mann <damann@mitre.org>

Fri Jul 09 22:31:37 GMT 1999

• FINAL CONTENT DECISION: Use "Same Codebase" LOA for Software Flaws
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Administrivia: New mailing list to begin next week
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Approaching Deadlines for CVE Validation
  • From: "Steven M. Christey" <coley@linus.mitre.org>

Sat Jul 10 00:11:13 GMT 1999

• Re: Level of Abstraction Issue: Similar Applications, "Same" Vulnerability
  • From: Gene Spafford <spaf@cs.purdue.edu>
• 2-tiered case Re: Expediency or Correctness WAS: Level ofAbstraction
  • From: Pascal Meunier <pascalm@cup.hp.com>

Sun Jul 11 18:08:07 GMT 1999

• Test, Ignore
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• CVE Review meetings: dates and times?
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• TEST of new CVE list - please respond to me
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• SUMMARY: Votes and scheduled decisions for active clusters
  • From: "Steven M. Christey" <coley@linus.mitre.org>

Mon Jul 12 13:26:44 GMT 1999

• Administrivia: New list, new Editorial Board member
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Reminder: mailing list archives to be made public
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• INTERIM DECISION: ACCEPT 10 VEN-ROUTER candidates (Final 7/12)
  • From: "Steven M. Christey" <coley@linus.mitre.org>

Tue Jul 13 00:24:57 GMT 1999

• INTERIM DECISION: ACCEPT 1 VEN-others candidates (Final 7/12)
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• INTERIM DECISION: ACCEPT 9 VEN-HP candidates (Final 7/12)
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• INTERIM DECISION: ACCEPT 9 candidates from VEN-BSD (Final 7/12)
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Which "Codebases" do these candidates really split into?
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Re: Which "Codebases" do these candidates really split into?
  • From: Gene Spafford <spaf@cs.purdue.edu>
• Re: Which "Codebases" do these candidates really split into?
  • From: Adam Shostack <adam@netect.com>

Wed Jul 14 06:29:43 GMT 1999

• PROPOSAL: Cluster 15 - ONEREF (43 candidates)
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• PROPOSAL: Cluster 16 - NOREFS (23 candidates)
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• PROPOSAL: Cluster 17 - MULT2 (14 candidates)
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• RE: PROPOSAL: Cluster 16 - NOREFS (23 candidates)
  • From: "Northcutt, Stephen, CIV, BMDO/DSC" <Stephen.Northcutt@bmdo.osd.mil>
• Re: PROPOSAL: Cluster 16 - NOREFS (23 candidates)
  • From: Adam Shostack <adam@netect.com>
• Re: PROPOSAL: Cluster 17 - MULT2 (14 candidates)
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Re: PROPOSAL: Cluster 17 - MULT2 (14 candidates)
  • From: Gene Spafford <spaf@cs.purdue.edu>
• Issues for configuration problems in the CVE
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• CONTENT DECISION: High-level content decisions for CF problems
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• CONTENT DECISION: Content Decisions for "Password Selection" problems
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• PROPOSAL: Cluster 18 - PASS (14 candidates)
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Administrivia
  • From: "Steven M. Christey" <coley@linus.mitre.org>

Thu Jul 15 03:22:47 GMT 1999

• Re: Issues for configuration problems in the CVE
  • From: Gene Spafford <spaf@cs.purdue.edu>
• Re: Which "Codebases" do these candidates really split into?
  • From: Stuart Staniford-Chen <stuart@silicondefense.com>
• RE: PROPOSAL: Cluster 18 - PASS (14 candidates)
  • From: "Northcutt, Stephen, CIV, BMDO/DSC" <Stephen.Northcutt@bmdo.osd.mil>

Fri Jul 16 16:38:34 GMT 1999

• Re: CONTENT DECISION: Content Decisions for "Password Selection" problems
  • From: Adam Shostack <adam@netect.com>
• Re: CONTENT DECISION: Content Decisions for "Password Selection" problems
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Re: CONTENT DECISION: Content Decisions for "Password Selection" problems
  • From: Aleph One <aleph1@underground.org>
• Re: CONTENT DECISION: Content Decisions for "Password Selection" problems
  • From: Adam Shostack <adam@netect.com>
• CVE Review meetings 7/29-30 and 8/12-13 in Bedford, MA
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Re: Issues for configuration problems in the CVE
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Re: CONTENT DECISION: Content Decisions for "Password Selection" problems
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Re: CONTENT DECISION: Content Decisions for "Password Selection" problems
  • From: Aleph One <aleph1@underground.org>
• Issues with High Cardinality vulnerabilities
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Hotel Information for CVE Review meetings
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Administrivia
  • From: "Steven M. Christey" <coley@linus.mitre.org>

Sat Jul 17 18:54:36 GMT 1999

• Re: Issues for configuration problems in the CVE
  • From: Gene Spafford <spaf@cs.purdue.edu>
• Re: CONTENT DECISION: Content Decisions for "Password Selection" problems
  • From: Gene Spafford <spaf@cs.purdue.edu>

Sun Jul 18 19:10:05 GMT 1999

• Cardinality, classes was Re: Issues for configuration problems in the CVE
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Re: Issues for configuration problems in the CVE
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• FINAL DECISION: ACCEPT 10 candidates from VEN-ROUTER cluster
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• FINAL DECISION: ACCEPT 1 candidate from VEN-others cluster
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• FINAL DECISION: ACCEPT 9 candidates from VEN-HP cluster
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• FINAL DECISION: ACCEPT 9 candidates from VEN-BSD cluster
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• VOTE SUMMARY: active candidates in CERT and VEN-* clusters
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Re: Which "Codebases" do these candidates really split into?
  • From: Pascal Meunier <pascalm@cup.hp.com>
• Exploding CVE entries
  • From: Pascal Meunier <pascalm@cup.hp.com>

Mon Jul 19 00:24:28 GMT 1999

• Re: CONTENT DECISION: Content Decisions for "Password Selection" problems
  • From: Pascal Meunier <pascalm@cup.hp.com>
• Re: CONTENT DECISION: Content Decisions for "Password Selection" problems
  • From: Adam Shostack <adam@NETECT.COM>
• RE: Which "Codebases" do these candidates really split into?
  • From: "Prosser, Mike" <mike.prosser@L-3SECURITY.COM>
• Dot Notation Proposal WAS: Exploding CVE entries
  • From: Dave Mann <damann@mitre.org>

Tue Jul 20 02:05:14 GMT 1999

• Re: Dot Notation Proposal WAS: Exploding CVE entries
  • From: Pascal Meunier <pascalm@cup.hp.com>
• Re: Dot Notation Proposal WAS: Exploding CVE entries
  • From: Gene Spafford <spaf@cs.purdue.edu>
• Re: Dot Notation Proposal WAS: Exploding CVE entries
  • From: Dave Mann <damann@mitre.org>

Wed Jul 21 02:26:21 GMT 1999

• PROPOSAL: Cluster 19 - NTCONFIG (13 candidates)
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• PROPOSAL: Cluster 20 - DESIGN (27 candidates)
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• CONTENT DECISION: Discussion related to DESIGN and NTCONFIG clusters
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Re: PROPOSAL: Cluster 20 - DESIGN (27 candidates)
  • From: Gene Spafford <spaf@cs.purdue.edu>
• Re: PROPOSAL: Cluster 20 - DESIGN (27 candidates)
  • From: dac@zurich.ibm.com
• Re: PROPOSAL: Cluster 20 - DESIGN (27 candidates)
  • From: Gene Spafford <spaf@cs.purdue.edu>
• Re: PROPOSAL: Cluster 20 - DESIGN (27 candidates)
  • From: Aleph One <aleph1@underground.org>
• Re: PROPOSAL: Cluster 20 - DESIGN (27 candidates)
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Re: PROPOSAL: Cluster 20 - DESIGN (27 candidates)
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Re: PROPOSAL: Cluster 20 - DESIGN (27 candidates)
  • From: Gene Spafford <spaf@cs.purdue.edu>

Thu Jul 22 00:08:41 GMT 1999

• Re: PROPOSAL: Cluster 20 - DESIGN (27 candidates)
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• RE: PROPOSAL: Cluster 19 - NTCONFIG (13 candidates)
  • From: "Northcutt, Stephen, CIV, BMDO/DSC" <Stephen.Northcutt@bmdo.osd.mil>
• Re: PROPOSAL: Cluster 19 - NTCONFIG (13 candidates)
  • From: "Steven M. Christey" <coley@linus.mitre.org>

Fri Jul 23 15:25:46 GMT 1999

• Re: PROPOSAL: Cluster 20 - DESIGN (27 candidates)
  • From: Bill Hill <bill@mitre.org>
• Remaining 200 Candidates to be proposed in next 7 days
  • From: "Steven M. Christey" <coley@linus.mitre.org>

Mon Jul 26 15:29:55 GMT 1999

• RE: PROPOSAL: Cluster 20 - DESIGN (27 candidates)
  • From: "Northcutt, Stephen, CIV, BMDO/DSC" <Stephen.Northcutt@bmdo.osd.mil>
• Re: PROPOSAL: Cluster 19 - NTCONFIG (13 candidates)
  • From: bakerd@mitre.org (David Baker)
• Re: PROPOSAL: Cluster 20 - DESIGN (27 candidates)
  • From: bakerd@mitre.org (David Baker)
• High-level schedule of future CVE release activities
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• 19 candidate clusters to be proposed this week
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• PROPOSAL: Cluster 21 - MORELOW (37 candidates)
  • From: "Steven M. Christey" <coley@linus.mitre.org>

Tue Jul 27 00:01:56 GMT 1999

• PROPOSAL: Cluster 22 - CDEC (15 candidates)
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• PROPOSAL: Cluster 23 NETCONF - (12 candidates)
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• PROPOSAL: Cluster 24 - FINGER (6 candidates)
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• PROPOSAL: Cluster 25 - IDS (5 candidates)
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• RE: PROPOSAL: Cluster 25 - IDS (5 candidates)
  • From: "Northcutt, Stephen, CIV, BMDO/DSC" <Stephen.Northcutt@bmdo.osd.mil>
• Re: PROPOSAL: Cluster 25 - IDS (5 candidates)
  • From: Adam Shostack <adam@netect.com>
• Administrivia - new Editorial Board member
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Re: PROPOSAL: Cluster 24 - FINGER (6 candidates)
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• RE: PROPOSAL: Cluster 19 - NTCONFIG (13 candidates)
  • From: Craig Ozancin <cozancin@axent.com>
• Re: PROPOSAL: Cluster 19 - NTCONFIG (13 candidates)
  • From: Adam Shostack <adam@NETECT.COM>
• RE: PROPOSAL: Cluster 20 - DESIGN (27 candidates)
  • From: Craig Ozancin <cozancin@axent.com>
• RE: PROPOSAL: Cluster 19 - NTCONFIG (13 candidates)
  • From: Craig Ozancin <cozancin@axent.com>
• RE: PROPOSAL: Cluster 19 - NTCONFIG (13 candidates)
  • From: Craig Ozancin <cozancin@axent.com>
• Re: PROPOSAL: Cluster 25 - IDS (5 candidates)
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• RE: PROPOSAL: Cluster 21 - MORELOW (37 candidates)
  • From: Craig Ozancin <cozancin@axent.com>
• Re: PROPOSAL: Cluster 19 - NTCONFIG (13 candidates)
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• RE: PROPOSAL: Cluster 20 - DESIGN (27 candidates)
  • From: "Steven M. Christey" <coley@linus.mitre.org>

Wed Jul 28 00:34:10 GMT 1999

• Re: PROPOSAL: Cluster 21 - MORELOW (37 candidates)
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• When is a vulnerability sufficiently verified to exist?
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• PROPOSAL: Cluster 26 - VERIFY-BUGTRAQ (23 candidates)
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• PROPOSAL: Cluster 27 - VERIFY-TOOL (7 candidates)
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• CONTENT DECISION: Distinctive descriptions to support lookup
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Editorial Board archives available
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Re: PROPOSAL: Cluster 27 - VERIFY-TOOL (7 candidates)
  • From: Adam Shostack <adam@netect.com>
• What is sufficient detail for a CVE vulnerability?
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• RE: PROPOSAL: Cluster 23 NETCONF - (12 candidates)
  • From: "Northcutt, Stephen, CIV, BMDO/DSC" <Stephen.Northcutt@bmdo.osd.mil>
• CVE: intellectual property/branding
  • From: Stuart Staniford-Chen <stuart@silicondefense.com>
• Re: CVE: intellectual property/branding
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• PROPOSAL: Cluster 28 - DESC (2 candidates)
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• PROPOSAL: Cluster 29 - PRIVACY (9 candidates)
  • From: "Steven M. Christey" <coley@linus.mitre.org>

Thu Jul 29 00:13:37 GMT 1999

• CONTENT DECISION: Not a CVE Vulnerability
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Re: CONTENT DECISION: Not a CVE Vulnerability
  • From: Gene Spafford <spaf@cs.purdue.edu>
• PROPOSAL: Cluster 30 - NOVULN (19 candidates)
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• PROPOSAL: Cluster 31 - CFMISC (18 candidates)
  • From: "Steven M. Christey" <coley@linus.mitre.org>