PROPOSAL: Cluster 37 - SA-OTHER (8 candidates)

["Steven M. Christey" <coley@linus.mitre.org>]

The following cluster identifies the remaining SA category candidates,
which are often treated as separate checks by security tools.

- Steve



Summary of votes to use (in ascending order of "severity"):

ACCEPT - member accepts the candidate as proposed
NOOP - member has no opinion on the candidate
MODIFY - member wants to change some minor detail (e.g. reference/description)
REVIEWING - member is reviewing/researching the candidate
RECAST - candidate must be significantly modified, e.g. split or merged
REJECT - candidate is "not a vulnerability", or a duplicate, etc.

Please write your vote on the line that starts with "VOTE: ".  If you
want to add comments or details, add them to lines after the VOTE: line.


=================================
Candidate: CAN-1999-0640
Published:
Final-Decision:
Interim-Decision:
Modified:
Announced: 19990804
Assigned: 19990607
Category: SA

The Gopher service is running.

VOTE:

=================================
Candidate: CAN-1999-0644
Published:
Final-Decision:
Interim-Decision:
Modified:
Announced: 19990804
Assigned: 19990607
Category: SA

The NNTP news service is running.

VOTE:

=================================
Candidate: CAN-1999-0648
Published:
Final-Decision:
Interim-Decision:
Modified:
Announced: 19990804
Assigned: 19990607
Category: SA

The X25 service is running.

VOTE:

=================================
Candidate: CAN-1999-0649
Published:
Final-Decision:
Interim-Decision:
Modified:
Announced: 19990804
Assigned: 19990607
Category: SA

The FSP service is running.

VOTE:

=================================
Candidate: CAN-1999-0650
Published:
Final-Decision:
Interim-Decision:
Modified:
Announced: 19990804
Assigned: 19990607
Category: SA

The netstat service is running.

VOTE:

=================================
Candidate: CAN-1999-0652
Published:
Final-Decision:
Interim-Decision:
Modified:
Announced: 19990804
Assigned: 19990607
Category: SA

A database service is running, e.g. a SQL server, Oracle, or mySQL.

VOTE:

=================================
Candidate: CAN-1999-0656
Published:
Final-Decision:
Interim-Decision:
Modified:
Announced: 19990804
Assigned: 19990607
Category: SA

The ugidd service is running.

VOTE:

=================================
Candidate: CAN-1999-0658
Published:
Final-Decision:
Interim-Decision:
Modified:
Announced: 19990804
Assigned: 19990607
Category: SA

DCOM is running.

VOTE: