Re: CVE Must-Have Coverage

• To: "Mann, Dave" <damann@mitre.org>
• Subject: Re: CVE Must-Have Coverage
• From: "Steven M. Christey" <coley@rcf-smtp.mitre.org>
• Date: Mon, 17 Oct 2011 22:46:14 -0400
• CC: cve-editorial-board-list <cve-editorial-board-list@LISTS.MITRE.ORG>
• Delivery-Date: Mon Oct 17 22:46:37 2011
• In-Reply-To: <3FF9F74E63A7484EB3B88F04329CBEDC04448C426C@IMCMBX1.MITRE.ORG>
• List-Help: <mailto:LISTSERV@LISTS.MITRE.ORG?body=INFO%20CVE-EDITORIAL-BOARD-LIST>
• List-Owner: <mailto:CVE-EDITORIAL-BOARD-LIST-request@LISTS.MITRE.ORG>
• List-Subscribe: <mailto:CVE-EDITORIAL-BOARD-LIST-subscribe-request@LISTS.MITRE.ORG>
• List-Unsubscribe: <mailto:CVE-EDITORIAL-BOARD-LIST-unsubscribe-request@LISTS.MITRE.ORG>
• References: <3FF9F74E63A7484EB3B88F04329CBEDC04448C426C@IMCMBX1.MITRE.ORG>
• Sender: <owner-cve-editorial-board-list@LISTS.MITRE.ORG>

All,

For your information, here are the current sources that the CVE content 
team directly monitors.  (Note that we don't have 100% coverage for most 
of these).

SecurityFocus BID
Bugtraq mailing list
US-CERT Technical Alerts
US-CERT Vulnerability Notes
Cisco
Debian
Exploit-DB
Fedora
Gentoo
HP
iDefense
JP-CERT JVN
Mandriva
Microsoft
OSVDB
Red Hat
Security Tracker
Secunia
SUSE (openSUSE is also indirectly monitored)
Ubuntu
ISS X-Force


We used to monitor FRSIRT/VUPEN, but since they removed their public 
database entirely, we don't track them any more.

- Steve

• References:
  • CVE Must-Have Coverage
    • From: "Mann, Dave" <damann@mitre.org>

• Prev by Date: Re: CVE Must-Have Coverage
• Next by Date: Re: CVE Must-Have Coverage
• Prev by thread: Re: CVE Must-Have Coverage
• Next by thread: Re: CVE Must-Have Coverage
• Index(es):
  • Date
  • Thread