Penetration Testing mailing list archives

Re: How to find if exploit exist to a reported CVE ?


From: security curmudgeon <jericho () attrition org>
Date: Tue, 6 Nov 2007 18:18:36 +0000 (UTC)


While the database has a limited data set, OSVDB does track if an exploit 
is "available" (public) or "unavailable" (known to exist, but private) 
when the information is available.

On Fri, 2 Nov 2007, Juan B wrote:

: Hi,
: 
: I got a security vulnerability report and want to
: check if an known exploit exist for a particular CVe
: number. in which site I can find it out? milw0rm?
: 
: thanks!
: 
: Juan 
: 
: __________________________________________________
: Do You Yahoo!?
: Tired of spam?  Yahoo! Mail has the best spam protection around 
: http://mail.yahoo.com 
: 
: ------------------------------------------------------------------------
: This list is sponsored by: Cenzic
: 
: Need to secure your web apps NOW?
: Cenzic finds more, "real" vulnerabilities fast.
: Click to try it, buy it or download a solution FREE today!
: 
: http://www.cenzic.com/downloads
: ------------------------------------------------------------------------
: 

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------


Current thread: