Re: [users@httpd] CVE NIST discrepancies

2020-08-14 Thread Nic P
-4360 2013-0941 2013-0942 2013-2765 2013-4365 Is there any Apache official statement to the bug in NIST that I can refer the auditors to? On Fri, Aug 14, 2020 at 2:30 PM Eric Covener wrote: > On Fri, Aug 14, 2020 at 11:49 AM Nic P wrote: > > > > Hi > > > > I am

[users@httpd] CVE NIST discrepancies

2020-08-14 Thread Nic P
Hi I am struggling through an audit with explaining CVE's listed on NIST that do not appear on the Apache site with any fixes. CVE-1999-0070 is an example showing in nist site as impacting Apache, but no reference to this on the Apache security pages https://nvd.nist.gov/vuln/detail/CVE-1999-007