Re: Vuln scoring system anyone?

[Florian Weimer <fw () deneb enyo de>]

* Tom Parker:

> Perhaps I've missed the point of the system here; this is a topic I
> gas about all of the time, so I wont bore you - I'm just curious to
> hear what people think.

Scoring has to be a local process; it requires some knowledge of your
infrastructure.  Right now, it's mostly pointless, though, because
vendors deliberately withhold details which are necessary for judging
the potential impact on your infrastructure.
_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
https://lists.immunitysec.com/mailman/listinfo/dailydave