再保险:建议:CVE候选人/批准编号方案

1。斜方(或Mitre-controlled自动机制)应填写所有CMEX字段为候选人。不需要这是留给申请人(和我们可能不想离开他们)。-名称(自动)-创建日期(自动)- id / CNA提出它的名称(基于网站访问id -登录/ SMIME Cert / PGPkey ?),状态(总是等待)-状态的解释(空白填写后讨论)2。需要有一些容易检索大量CAN-numbers的机制。(即我们不想要反复触及web页面上的“提交”按钮生成10编号为预订)。3所示。当CVE搜索可以,它应该返回一个链接CAN-webpage *如果*可以被分配。没有一点沮丧的人,说它不存在在一个页面上搜索又在另一个。4所示。 The results of an enquiry for a CAN-number on the CAN-webpage should provide a contact to the proposer. (i.e. imagine a vendor who has been told about some CAN-number by some 3rd party and wants to get involved in the discussion to provide a fix) Your status field definitions could probably use some discussion, but for the sake of time to implementation, we can defer that until we get rolling. Cheers, Russ - NTBugtraq Editor