[VIM] vendor dispute policy

jkouns jkouns at opensecurityfoundation.org
Wed May 17 01:28:09 EDT 2006


Steve--
I would love to take a look so if you are willing then send it over. 
OSVDB is automating vendor disputes in our Vulnerability Disclosure 
Framework project (we should finally have our developers thanks to 
Google Summer of Code!).  We have rough ideas together on the "policy" 
but have been more focused on the process to help vendors and the 
notifications required.  Contacting researchers, vendors and other VDBs 
with dispute and updates information....
--Jake

Steven M. Christey wrote:
> All,
> 
> I'm not ready to post it publicly, but I just wrote up a rough draft
> of a vendor dispute policy for CVE.  If you want to see it, let me
> know, but please don't publish it - though you should feel free to
> steal any words or ideas.
> 
> Maybe someday I'll get to that "best available information"
> document...
> 
> - Steve
> 
> 
> 
> 


More information about the VIM mailing list