Re: INTERIM DECISION: ACCEPT 5 SA category candidates (Final 9/28)

• To: "Steven M. Christey" <coley@linus.mitre.org>
• Subject: Re: INTERIM DECISION: ACCEPT 5 SA category candidates (Final 9/28)
• From: Gene Spafford <spaf@cs.purdue.edu>
• Date: Sun, 26 Sep 1999 16:15:12 -0500
• Cc: cve-editorial-board-list@lists.mitre.org
• Delivery-Date: Sun Sep 26 17:16:02 1999
• In-Reply-To: <199909251805.OAA14228@basie.mitre.org>
• References: <199909251805.OAA14228@basie.mitre.org>
• Reply-To: spaf@cs.purdue.edu

If I am running a modified version of "finger", is that an exposure? 
I could have a modified version that returns false information, or a 
canned message about who to contact for info.

I would argue that simply have a running server for finger, or rwho, 
or any of the other things is not the exposure.

--spaf

• References:
  • Re: INTERIM DECISION: ACCEPT 5 SA category candidates (Final 9/28)
    • From: "Steven M. Christey" <coley@linus.mitre.org>

• Prev by Date: Changes to the CVE version number scheme
• Next by Date: Re: INTERIM DECISION: ACCEPT 5 SA category candidates (Final 9/28)
• Prev by thread: Re: INTERIM DECISION: ACCEPT 5 SA category candidates (Final 9/28)
• Next by thread: Re: INTERIM DECISION: ACCEPT 5 SA category candidates (Final 9/28)
• Index(es):
  • Date
  • Thread