Hello,

currently we have a situation where many NVTs have a  tag_solution
with a text like this:

"No solution or patch is available as of 06th December, 2013. Information
 regarding this issue will update once the solution details are available."

It seems that for many products, like wingate (CVE-2008-3606,
scripts/2008/secpod_wingate_imap_dos_vuln_900201.nasl) no solution was
provided for a long time and very like will not ever.

I propose for such cases to replace the above text by something like

"No solution or patch was made available for at least one year. Likely none
will be provided at all other than an upgrade to a newer release."

Better phrases for the core message are welcome.

Also: Is 1 year a appropriate duration until we can conclude
there will be no solution anymore?

Best

Jan

-- 
Dr. Jan-Oliver Wagner |  ++49-541-335084-0  |  http://www.greenbone.net/
Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 
202460
Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner
_______________________________________________
Openvas-plugins mailing list
[email protected]
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-plugins

Reply via email to