> I've googled this and found nothing but I'm sure it has been discussed > before... > Is there any work being done to get CVE names or aliases into the virus > database? > It would be nice to be able to dump the names and/or have the virus email > replies (amavisd-new) have links to the CVE or CAN names.
Unfortunately, CAN's & CVE's are for vulnerabilities. Viruses/worms may exploit none, one, or several vulnerabilities in order to spread. Linking to CVEs won't really work to create any sort of commonality between vendors/naming conventions. I think it would just confuse things more. > I'm all for ClamAV to be the first on the block to name a virus but it > would > be nice if the submission to CVE (a CAN name?) would be included in > added viruses and somehow have a tool or some way to add the CVE/CAN > alias to the db. Virus naming conventions WOULD be wonderful. Unfortunately, the effort required to normalize such things (like an alias database) is large. On top of this, there is no real motivation for any other vendors to comply once a "standard" had been picked by whatever organization. Not to mention the fact that uniqueness of name, if picked by the media, is a great marketing tool. > I'm sure my sight isn't that different as others where we have more than > one > layer in the virus/spam/blanned filters mix. It would be nice to just > reference CVE/CAN names in a few reports instead of spending lots > of time searching aliases from different vendors (when most of the > for cost vendors are already supporting CVE). Again, I agree. It's a good idea to normalize these things. But CVEs aren't the way. --Seth ------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
