Thu Jun 03 21:53:58 GMT 1999

• Update: Vendor Mappings and NDA's
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Validation of CVE candidate vulnerabilities to begin Friday 6/4
  • From: "Steven M. Christey" <coley@linus.mitre.org>

Mon Jun 07 20:50:26 GMT 1999

• CVE Validation Plan: Candidate Clusters
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Initial Candidate Proposal and Acceptance Process
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Initial Candidate Proposal and Acceptance Process: Clarification
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• First candidate cluster for validation: CERT
  • From: "Steven M. Christey" <coley@linus.mitre.org>

Wed Jun 09 17:26:57 GMT 1999

• RE: First candidate cluster for validation: CERT
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Re: First candidate cluster for validation: CERT
  • From: Adam Shostack <adam@netect.com>
• Re: First candidate cluster for validation: CERT
  • From: "Steven M. Christey" <coley@linus.mitre.org>

Thu Jun 10 21:32:54 GMT 1999

• Administrivia
  • From: "Steven M. Christey" <coley@linus.mitre.org>

Fri Jun 11 18:33:02 GMT 1999

• Administrivia
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Vendor mapping NDA is ready
  • From: "Steven M. Christey" <coley@linus.mitre.org>

Mon Jun 14 18:06:29 GMT 1999

• Phases of Candidate Acceptance
  • From: "Steven M. Christey" <coley@linus.mitre.org>

Tue Jun 15 14:05:10 GMT 1999

• Moving ahead
  • From: Adam Shostack <adam@netect.com>
• Re: Moving ahead
  • From: Adam Shostack <adam@netect.com>
• test - please respond
  • From: Steve "M." Christey <Steven.M.Christey@heckle.mitre.org>

Wed Jun 16 14:32:51 GMT 1999

• Re: Moving ahead
  • From: "Sheppard,Martin L." <sheppard@mitre.org>
• Re: Moving ahead
  • From: Adam Shostack <adam@netect.com>
• RE: Moving ahead
  • From: Craig Ozancin <cozancin@axent.com>
• Andre Frech's comments on CVE CERT candidate cluster
  • From: "Steven M. Christey" <coley@linus.mitre.org>

Thu Jun 17 18:57:37 GMT 1999

• 23 Candidates moved to Interim Decision - Final Decision 6/21/99
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• CERT candidates: Status as of 6/17/99
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Sub-clusters of the VEN Candidate Cluster
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Cluster 02: VEN-AIX
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Cluster 03: VEN-SUN
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Cluster 04: VEN-HP
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Cluster 05: VEN-SGI
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Cluster 06: VEN-others
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Cluster 07: VEN-ROUTER
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Cluster 08: VEN-BSD
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Mid-August Deadline for CVE Review?
  • From: Dave Mann <damann@mitre.org>
• Administrivia
  • From: "Steven M. Christey" <coley@linus.mitre.org>

Fri Jun 18 13:32:15 GMT 1999

• Re: Cluster 04: VEN-HP
  • From: Adam Shostack <adam@netect.com>
• Re: Cluster 05: VEN-SGI
  • From: Adam Shostack <adam@netect.com>
• Re: Cluster 06: VEN-others
  • From: Adam Shostack <adam@netect.com>
• Re: Cluster 02: VEN-AIX
  • From: Adam Shostack <adam@netect.com>
• Re: Cluster 02: VEN-AIX
  • From: Gene Spafford <spaf@cs.purdue.edu>
• Re: Cluster 02: VEN-AIX
  • From: "Steven M. Christey" <coley@linus.mitre.org>

Mon Jun 21 13:48:29 GMT 1999

• Re: Cluster 08: VEN-BSD
  • From: Adam Shostack <adam@netect.com>
• Steve Northcutt's Comments on VEN clusters
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• CHANGE to the phases of candidate review
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Final Decision: 23 ACCEPTed candidates
  • From: "Steven M. Christey" <coley@linus.mitre.org>

Tue Jun 22 21:21:41 GMT 1999

• MODIFY-01 cluster: 25 CERT candidates moved to MODIFICATION phase
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• MODIFY-01 cluster: summary of past votes
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• VEN sub-clusters: vote summary
  • From: "Steven M. Christey" <coley@linus.mitre.org>

Wed Jun 23 17:40:23 GMT 1999

• Re: MODIFY-01 cluster: 25 CERT candidates moved to MODIFICATION phase
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Re: MODIFY-01 cluster: 25 CERT candidates moved to MODIFICATION phase
  • From: Aleph One <aleph1@underground.org>
• Cluster proposal schedule, and request for vulnerability lists
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• PROPOSAL: Cluster 09 - MULT (34 candidates)
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• PROPOSAL: Cluster 10 - CGI (31 candidates)
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• PROPOSAL: Cluster 11 - BUF (32 candidates)
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• CVE Review meeting at MITRE, this August 11-12?
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Re: CVE Review meeting at MITRE, this August 11-12?
  • From: Aleph One <aleph1@underground.org>
• Re: CVE Review meeting at MITRE, this August 11-12?
  • From: "Steven M. Christey" <coley@linus.mitre.org>

Thu Jun 24 00:27:32 GMT 1999

• RE: MODIFY-01 cluster: 25 CERT candidates moved to MODIFICATION phase
  • From: "Andre Frech (ISS)" <afrech@iss.net>
• Re: CVE Review meeting at MITRE, this August 11-12?
  • From: Aleph One <aleph1@underground.org>
• RE: MODIFY-01 cluster: 25 CERT candidates moved to MODIFICATION phase
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Re: CVE Review meeting at MITRE, this August 11-12?
  • From: Adam Shostack <adam@netect.com>
• Re: CVE Review meeting at MITRE, this August 11-12?
  • From: Aleph One <aleph1@underground.org>
• VOTE SUMMARY: all active clusters
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Administrivia
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• TEST - Dave, please just "reply"
  • From: "Steven M. Christey" <coley@linus.mitre.org>

Sat Jun 26 06:06:02 GMT 1999

• Re: MODIFY-01 cluster: 25 CERT candidates moved to MODIFICATIONphase
  • From: Gene Spafford <spaf@cs.purdue.edu>

Mon Jun 28 20:18:34 GMT 1999

• RE: Cluster 03: VEN-SUN
  • From: "Prosser, Mike" <mike.prosser@L-3Security.com>
• Recall: Cluster 03: VEN-SUN
  • From: "Prosser, Mike" <mike.prosser@L-3Security.com>
• Level of Abstraction Issue: Similar Applications, "Same" Vulnerability
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Re: Level of Abstraction Issue: Similar Applications, "Same" Vulnerability
  • From: Adam Shostack <adam@netect.com>
• FW: Cluster 03: VEN-SUN
  • From: "Prosser, Mike" <mike.prosser@L-3Security.com>

Tue Jun 29 00:03:58 GMT 1999

• INTERIM DECISION: ACCEPT 16 candidates from MODIFY-01 cluster
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• INTERIM DECISION: ACCEPT 3 candidates from CERT cluster
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Re: Level of Abstraction Issue: Similar Applications, "Same" Vulnerability
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Re: Level of Abstraction Issue: Similar Applications, "Same"Vulnerability
  • From: Pascal Meunier <pascalm@cup.hp.com>
• RE: MODIFY-01 cluster: 25 CERT candidates moved to MODIFICATION phase
  • From: "Prosser, Mike" <mike.prosser@L-3Security.com>
• Interim CVE Review meeting at Black Hat, July 7-8
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Re: Level of Abstraction Issue: Similar Applications, "Same" Vulnerability
  • From: Aleph One <aleph1@underground.org>
• Re: Interim CVE Review meeting at Black Hat, July 7-8
  • From: Aleph One <aleph1@underground.org>
• RE: Interim CVE Review meeting at Black Hat, July 7-8
  • From: Craig Ozancin <cozancin@axent.com>
• Re: Level of Abstraction Issue: Similar Applications, "Same"Vulnerability
  • From: Gene Spafford <spaf@cs.purdue.edu>
• Re: Level of Abstraction Issue: Similar Applications, "Same" Vulnerability
  • From: Aleph One <aleph1@underground.org>
• Re: Level of Abstraction Issue: Similar Applications, "Same"Vulnerability
  • From: Gene Spafford <spaf@cs.purdue.edu>
• Re: Level of Abstraction Issue: Similar Applications, "Same" Vulnerability
  • From: Aleph One <aleph1@underground.org>
• Re: Level of Abstraction Issue: Similar Applications, "Same" Vulnerability
  • From: Adam Shostack <adam@netect.com>
• Question about CVE to vendor mappings
  • From: "Andre Frech (ISS)" <afrech@iss.net>
• RE: Question about CVE to vendor mappings
  • From: Russ <Russ.Cooper@rc.on.ca>
• Re: Level of Abstraction Issue: Similar Applications, "Same" Vulnerability
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Re: Question about CVE to vendor mappings
  • From: "Steven M. Christey" <coley@linus.mitre.org>

Wed Jun 30 00:42:10 GMT 1999

• INTERIM DECISION: ACCEPT 8 candidates from cluster VEN-AIX
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Re: Level of Abstraction Issue: Similar Applications, "Same"Vulnerability
  • From: Dave Mann <damann@mitre.org>
• INTERIM DECISION: ACCEPT 11 candidates from VEN-SUN (Final 7/5)
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• INTERIM DECISION: ACCEPT 6 candidates from VEN-SGI (Final 7/5)
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Candidate cluster status: remaining VEN clusters
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• PROPOSAL: Cluster 12 (NTLOW) - 19 candidates
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• PROPOSAL: Cluster 13 - DENY (13 candidates)
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• PROPOSAL: Cluster 14 - RESTLOW (39 candidates)
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• RE: PROPOSAL: Cluster 14 - RESTLOW (39 candidates)
  • From: "Northcutt, Stephen, CIV, BMDO/DSC" <Stephen.Northcutt@bmdo.osd.mil>
• RE: Question about CVE to vendor mappings
  • From: "Prosser, Mike" <mike.prosser@L-3Security.com>
• RE: CVE Review meeting at MITRE, this August 11-12?
  • From: "Prosser, Mike" <mike.prosser@L-3Security.com>
• Re: Level of Abstraction Issue: Similar Applications, "Same"Vulnerability
  • From: Gene Spafford <spaf@cs.purdue.edu>
• RE: Cluster 02: VEN-AIX
  • From: "Prosser, Mike" <mike.prosser@L-3Security.com>
• RE: Cluster 02: VEN-AIX
  • From: "Andre Frech (ISS)" <afrech@iss.net>
• RE: Cluster 06: VEN-others
  • From: "Prosser, Mike" <mike.prosser@L-3Security.com>
• Re: Cluster 02: VEN-AIX
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• CONTENT DECISION: Same Time of Discovery
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• CONTENT DECISION: Different Program, Same Code
  • From: "Steven M. Christey" <coley@linus.mitre.org>
• Re: CONTENT DECISION: Different Program, Same Code
  • From: Gene Spafford <spaf@cs.purdue.edu>
• Survey: Use of Same Attack/Same Codebase content decision in VDB's
  • From: "Steven M. Christey" <coley@linus.mitre.org>

Thu Jul 01 02:08:24 GMT 1999

• Re: Survey: Use of Same Attack/Same Codebase content decision inVDB's
  • From: Gene Spafford <spaf@cs.purdue.edu>