[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: CONTENT DECISION: Presence of Services or Applications (SA)



I really do not like the idea behind this category.   We might as 
well include most MS-based protocols, and most TCP services.   The 
fact that a service is present and has a history of being a point of 
entry on some systems is not a vulnerability.    That's like saying 
that the presence of computers tends to enable hacking -- take away 
the computers, and you no longer have break-ins!

--spaf

Page Last Updated or Reviewed: May 22, 2007