From: Dragos Ruiu [dr@DURSEC.COM]
Sent: Thursday, February 17, 2000 3:24 PM
To: VULN-DEV@SECURITYFOCUS.COM
Subject: Re: vulnerability database

On Wed, 16 Feb 2000, Ben Valenti wrote:
>... that he wants to reasearch vulnerability databases....

I would recommend looking at the following sites before charting the course for
your quest:

cve.mitre.org
whitehats.com
snort.rapidnet.com
securityfocus.com
www.ntbugtraq.com
www.securitywizards.com
www.l-3security.com
www.iss.net
www.esecurityonline.com
www.hiverworld.com
www.cybersafe.com
seclab.cs.ucdavis.edu
www.cert.org
www.cerias.purdue.edu
www.bindview.com
www.aql.fr
www.cyrano.com

and the classic... www.rootshell.com


...am I missing any other database compilations...?

(Do the NetRanger/cisco guys have a vuln db?)

cheers,
--dr

--
dursec.com / kyx.net - we're from the future                      http://www.dursec.com
learn kanga-foo from security experts: CanSecWest - April 19-21 Vancouver

Speakers: Ron Gula/NSW, Ken Williams/E&Y, Marty Roesch/Hiverworld, Fyodor/insecure.org,
          RainForestPuppy/wiretrip.net, Theo de Raadt/OpenBSD, Max Vision/whitehats.com
