[Openvas-plugins] CPE INVENTORY
henri.doreau at greenbone.net
Mon Jun 20 10:31:52 CEST 2011
> In fact seems both are allow :-( as the this cve :
> reference openbsd and openssh as vendor ???
> Now, i don't know how to distinguish between the 2 :-(
I don't know neither...
Nevertheless I can see (only) two entries like this in the CPE
dictionary. According to the CPE specification (2.2), the vendor
part "should be the highest organization-specific label of the
organization's DNS name". My understanding of this leads to openbsd
(http://www.openbsd.org) and makes me think that
cpe:/a:openssh:openssh entries should probably be deprecated.
Henri Doreau | Greenbone Networks GmbH | http://www.greenbone.net
Neuer Graben 17, 49074 Osnabrueck, Germany | AG Osnabrueck, HR B 202460
Executive Directors: Lukas Grunwald, Dr. Jan-Oliver Wagner
More information about the Openvas-plugins