Re: How to find if exploit exist to a reported CVE ?

From: security curmudgeon (jericho@attrition.org)
Date: Tue Nov 06 2007 - 13:18:36 EST


While the database has a limited data set, OSVDB does track if an exploit
is "available" (public) or "unavailable" (known to exist, but private)
when the information is available.

On Fri, 2 Nov 2007, Juan B wrote:

: Hi,
:
: I got a security vulnerability report and want to
: check if an known exploit exist for a particular CVe
: number. in which site I can find it out? milw0rm?
:
: thanks!
:
: Juan
:
: __________________________________________________
: Do You Yahoo!?
: Tired of spam? Yahoo! Mail has the best spam protection around
: http://mail.yahoo.com
:
: ------------------------------------------------------------------------
: This list is sponsored by: Cenzic
:
: Need to secure your web apps NOW?
: Cenzic finds more, "real" vulnerabilities fast.
: Click to try it, buy it or download a solution FREE today!
:
: http://www.cenzic.com/downloads
: ------------------------------------------------------------------------
:

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:58:11 EDT