Re: CONTENT DECISION: Presence of Services or Applications (SA)

• To: spaf@cs.purdue.edu, "Steven M. Christey" <coley@linus.mitre.org>
• Subject: Re: CONTENT DECISION: Presence of Services or Applications (SA)
• From: Aleph One <aleph1@underground.org>
• Date: Tue, 3 Aug 1999 21:28:23 -0700
• Cc: cve-editorial-board-list@lists.mitre.org
• In-Reply-To: <v04205509b3cd4ce41347@[128.10.104.66]>; from Gene Spafford on Tue, Aug 03, 1999 at 08:52:05PM -0500
• References: <199908040032.UAA12288@basie.mitre.org> <v04205509b3cd4ce41347@[128.10.104.66]>

On Tue, Aug 03, 1999 at 08:52:05PM -0500, Gene Spafford wrote:
> I really do not like the idea behind this category.   We might as
> well include most MS-based protocols, and most TCP services.   The
> fact that a service is present and has a history of being a point of
> entry on some systems is not a vulnerability.    That's like saying
> that the presence of computers tends to enable hacking -- take away
> the computers, and you no longer have break-ins!

Hear, hear!

> 
> --spaf
> 

-- 
Aleph One / aleph1@underground.org
http://underground.org/
KeyID 1024/948FD6B5 
Fingerprint EE C9 E8 AA CB AF 09 61  8C 39 EA 47 A8 6A B8 01 

• References:
  • CONTENT DECISION: Presence of Services or Applications (SA)
    • From: "Steven M. Christey" <coley@linus.mitre.org>
  • Re: CONTENT DECISION: Presence of Services or Applications (SA)
    • From: Gene Spafford <spaf@cs.purdue.edu>

• Prev by Date: Re: CONTENT DECISION: Presence of Services or Applications (SA)
• Next by Date: RE: PROPOSAL: Cluster 15 - ONEREF (43 candidates)
• Prev by thread: Re: CONTENT DECISION: Presence of Services or Applications (SA)
• Next by thread: RE: CONTENT DECISION: Presence of Services or Applications (SA)
• Index(es):
  • Date
  • Thread