OpenVAS: Re: NVT Description

["Jan-Oliver Wagner" <Jan-Oliver.Wagner () greenbone net>]

On Donnerstag, 24. Januar 2013, Sebastien Aucouturier wrote:
> NAME (MANDATORY)
yes. Remains as is.


> FAMILY  (MANDATORY)
yes. Remains as is.


> CVSS  (MANDATORY)
which is CVSS base vector. Anything else can be derived from it.
So, yes. Remains as is execept that we can eliminate risk_factor
and cvss_base eventually.


> OVERVIEW  (MANDATORY)
> DESCRIPTION (MANDATORY)
What would be the difference between these two?
Or in other words: How would you specify content
for these?


> SOLUTION   (OPTIONAL)
Yes, agreed!


> REFERENCES  (OPTIONAL)
Yes. We already have it. Just the URLs need to go there as well.


> VULNERABLE SYSTEMS (OPTIONAL)
Perhaps name it just "Affected"?


> OUTPUT (DATA GET FROM HOST by PLUGIN)
Yes, exactly. Only real information other than "vulnerable: yes/no"
as retrieved/computed from the NVT should go here. Description etc.
is redundant.


> and we need to replace the following keyword (build 09/11/11) by a the 
> correct one :
>
> CVSS Score( Report)?
Thats done meanwhile.

> Overview /  Synopsis
> Description / Vulnerability Insight / Impact / Bug Report
Description and/or Overview?

> Solution / Fix / Workaround
Yep, all "Solution".

> Reference[s?] / See [aA]lso
All to xrefs.

> Affected [Ss]oftware(\/OS)?  / The issue affects the following / The 
> following package is affected / The following versions are affected / 
> The following versions are vulnerable / Vulnerable systems
IMHO all "Affected".


What do you think?
What are we missing?

Best

Jan
-- 
Dr. Jan-Oliver Wagner |  ++49-541-335084-0  |  http://www.greenbone.net/
Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 202460
Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner
_______________________________________________
Openvas-plugins mailing list
Openvas-plugins () wald intevation org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-plugins