Re: [TECH] Duplicate candidates - which one should be preferred?

["Steven M. Christey" <coley@linus.mitre.org>]

Mike Prosser said:

>2001-0145 does contain additional info as well as a link to a patch on
>MS site.  Should probably give credit to the original poster but that
>isn't CVE's job!

Credit happens somewhat indirectly.  Since Bugtraq is a commonly used
reference, the Bugtraq posting will be added to whatever the
"official" CVE is.  This will at least point to the original
discoverer of the problem, although it won't explicitly name them.

- Steve