Nessus Risk Rating Discussion Part Trois - CVSS

There's been an interesting announcement at the RSA Conference for CVSS, the
Common Vulnerability Scoring System.

Many of the main vendors have agreed a scoring system, which will help
prioritize vulnerabilities. Tantalisingly brief details are given ion 
http://www.newscientist.com/article.ns?id=dn7040 or
http://www.infoworld.com/article/05/02/18/HNvulnerabilityrating_1.html

I've found very little real detail elsewhere, though Qualys have included
support in their product roadmap.

This might put pressure on Nessus to conform, at least when (if?) CVSS turns
from a press announcement to something real. 

Andrew Yeomans (Andrew.Yeomans@drkw.com)
Global Information Security, Dresdner Kleinwort Wasserstein





--------------------------------------------------------------------------------
The information contained herein is confidential and is intended solely for the
addressee. Access by any other party is unauthorised without the express 
written permission of the sender. If you are not the intended recipient, please 
contact the sender either via the company switchboard on +44 (0)20 7623 8000, or
via e-mail return. If you have received this e-mail in error or wish to read our
e-mail disclaimer statement and monitoring policy, please refer to 
http://www.drkw.com/disc/email/ or contact the sender. 3166
--------------------------------------------------------------------------------

_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus