oss-sec mailing list archives

Fwd: Old CVE ids, public, but still "RESERVED"


From: Raphael Geissert <geissert () debian org>
Date: Sat, 8 Feb 2014 12:17:31 +0100

Sending a copy to oss-sec, in case there are people interested in this kind 
of information.

----------  Forwarded Message  ----------

Subject: Old CVE ids, public, but still "RESERVED"
Date: Friday 24 January 2014
From: Raphael Geissert <geissert () debian org>
To: Vulnerability Information Managers <vim () attrition org>

Hi,

Attached are a list of CVE ids which are still marked as RESERVED
(i.e. no description/links/etc have been set) yet our security tracker
knows about them. The tracker only containing public data, it means
that the ids are not embargoed.

Hopefully these lists can be useful to MITRE to catch up on those, or
to anyone else.
I can generate these and other reports regularly if desired.

Notes:
* The year in the file name corresponds to the year in the CVE id, not
necessarily the year of assignment.
* The lists only contain the CVE id, probably a short description, and
one line of data from our tracker. The full data can be obtained
either by going to
https://security-tracker.debian.org/tracker/CVE-YYYY-XXXX or by
looking up on our text database.

Cheers,
-- 
Raphael Geissert - Debian Developer
www.debian.org - get.debian.net

Attachment: still-reserved-2011-CVEs.txt
Description:

Attachment: still-reserved-2012-CVEs.txt
Description:

Attachment: still-reserved-2013-CVEs.txt
Description:


Current thread: