Full Disclosure mailing list archives
Re: Open Letter on the Interpretation of "Vulnerability Statistics"
From: Matt Zimmerman <mdz () debian org>
Date: Wed, 11 Jan 2006 16:00:50 -0800
On Thu, Jan 12, 2006 at 12:15:35AM +0100, Florian Weimer wrote:
* Matt Zimmerman:Yes, this puzzles me too, but on the other hand, Debian became a CNA, and Debian's official policy is geared away from "responsible disclosure" -- all bug reports are supposed to be public.Debian isn't a CNA; as far as I know, it isn't possible for organizations to become CNAs.<http://cve.mitre.org/cve/cna.html#cnas> lists organizations, not individuals. The requirements are clearly geared towards organizations, too.
Unless things have changed since I went through the process, the authority involved does not extend to Debian in general but only to specific individuals. -- - mdz _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Re: Open Letter on the Interpretation of "Vulnerability Statistics", (continued)
- Re: Open Letter on the Interpretation of "Vulnerability Statistics" Georgi Guninski (Jan 09)
- Re: Open Letter on the Interpretation of "Vulnerability Statistics" Valdis . Kletnieks (Jan 09)
- Re: Open Letter on the Interpretation of "Vulnerability Statistics" InfoSecBOFH (Jan 09)
- Re: Open Letter on the Interpretation of "Vulnerability Statistics" Hugo Vazquez Carapez (Jan 10)
- Re: Open Letter on the Interpretation of "Vulnerability Statistics" Florian Weimer (Jan 07)
- Re: Open Letter on the Interpretation of "Vulnerability Statistics" Georgi Guninski (Jan 07)
- Re: Open Letter on the Interpretation of "Vulnerability Statistics" Florian Weimer (Jan 07)
- Re: Open Letter on the Interpretation of "Vulnerability Statistics" Georgi Guninski (Jan 07)
- Re: Open Letter on the Interpretation of "Vulnerability Statistics" Matt Zimmerman (Jan 09)
- Re: Open Letter on the Interpretation of "Vulnerability Statistics" Florian Weimer (Jan 11)
- Re: Open Letter on the Interpretation of "Vulnerability Statistics" Matt Zimmerman (Jan 11)
- RE: location Randall M (Jan 07)
- Re: location ad () heapoverflow com (Jan 07)
- Re: Open Letter on the Interpretation of "Vulnerability Statistics" Steven M. Christey (Jan 07)