19 candidate clusters to be proposed this week

["Steven M. Christey" <coley@linus.mitre.org>]

All:

I have re-evaluated the remaining 230 candidates and created the
following 19 clusters.  These clusters are (generally) smaller than
the ones we've reviewed in the past.

Note that most of the scheduled Interim Decision dates occur a month
from now.  Most of these clusters deal with content decisions that may
not be resolved until after the second CVE Review meeting, so the
schedule reflects that.

The DELAY and DUPE clusters may not be proposed at all before the CVE
is released.

- Steve


MORELOW (38 candidates)
--------------------
Scheduled Proposed: 7/26
Scheduled Interim Decision: 8/9
Scheduled Final Decision: 8/13

More low-controversy candidates


CDEC (14 candidates)
--------------------
Scheduled Proposed: 7/26
Scheduled Interim Decision: 8/23
Scheduled Final Decision: 8/27

Candidates affected by current content decision debates


NETCONF (12 candidates)
--------------------
Scheduled Proposed: 7/26
Scheduled Interim Decision: 8/23
Scheduled Final Decision: 8/27

Network configuration problems


FINGER (6 candidates)
--------------------
Scheduled Proposed: 7/26
Scheduled Interim Decision: 8/23
Scheduled Final Decision: 8/27

Problems related to finger


IDS (5 candidates)
--------------------
Scheduled Proposed: 7/26
Scheduled Interim Decision: 8/23
Scheduled Final Decision: 8/27

Problems with IDSes


VERIFY-BUGTRAQ (23 candidates)
--------------------
Scheduled Proposed: 7/27
Scheduled Interim Decision: 8/23
Scheduled Final Decision: 8/27

Problems discussed on Bugtraq but not seen in VDB's, or not confirmed


VERIFY-TOOL (7 candidates)
--------------------
Scheduled Proposed: 7/27
Scheduled Interim Decision: 8/23
Scheduled Final Decision: 8/27

Problems mentioned in a tool, but not seen in other VDB's


SF-MISC (10 candidates)
--------------------
Scheduled Proposed: 7/27
Scheduled Interim Decision: 8/23
Scheduled Final Decision: 8/27

Miscellaneous SF problems


PRIVACY (9 candidates)
--------------------
Scheduled Proposed: 7/28
Scheduled Interim Decision: 8/23
Scheduled Final Decision: 8/27

Problems related to privacy


NOVULN (12 candidates)
--------------------
Scheduled Proposed: 7/28
Scheduled Interim Decision: 8/23
Scheduled Final Decision: 8/27

Problems that may be regarded as "not a vulnerability"


CFMISC (18 candidates)
--------------------
Scheduled Proposed: 7/28
Scheduled Interim Decision: 8/23
Scheduled Final Decision: 8/27

Miscellaneous CF problems


DATA (18 candidates)
--------------------
Scheduled Proposed: 7/28
Scheduled Interim Decision: 8/23
Scheduled Final Decision: 8/27

CF problems related to data access


NT-REGISTRY (5 candidates)
--------------------
Scheduled Proposed: 7/28
Scheduled Interim Decision: 8/23
Scheduled Final Decision: 8/27

CF problems related to NT registry settings


SA-HIST (13 candidates)
--------------------
Scheduled Proposed: 7/29
Scheduled Interim Decision: 8/23
Scheduled Final Decision: 8/27

Presence of services with a history of problems


SA-ATTACK (10 candidates)
--------------------
Scheduled Proposed: 7/29
Scheduled Interim Decision: 8/23
Scheduled Final Decision: 8/27

Presence of services that are common attack points


SA-LITTLE (5 candidates)
--------------------
Scheduled Proposed: 7/29
Scheduled Interim Decision: 8/23
Scheduled Final Decision: 8/27

Presence of "little" services that are rarely necessary


SA-OTHER (8 candidates)
--------------------
Scheduled Proposed: 7/29
Scheduled Interim Decision: 8/23
Scheduled Final Decision: 8/27

Other SA candidates


DELAY (14 candidates)
--------------------
Scheduled Proposed: ??
Scheduled Interim Decision: ??
Scheduled Final Decision: ??

Delayed candidates due to vagueness or other factors


DUPE (3 candidates)
--------------------
Scheduled Proposed: ??
Scheduled Interim Decision: ??
Scheduled Final Decision: ??

Candidates that duplicate or intersect other candidates