Some javascript/style in this post has been disabled (
why?)
Never mind, I see that it is OVAL but I am skeptical of this logic:
"When a CPE Name does not have an OVAL Definition associated with it, the name can be matched against an actual system based on other known CPE Names (ones that have been matched via an OVAL Definition) by making a list of all the elements in the CPE Name and checking whether the target system has the hardware, software, or operating system indicated by each element. If the check succeeds for all elements, then the target is an instance of the CPE Name. Refer to the CPE Specification for a complete discussion and examples. "
Ken Lassesen,
HomeOffice: 360-297-4717 Cell: 360-509-2402 Fax: 928-832-6836
IM: [hidden email] [hidden email]
[hidden email]
CONFIDENTIALITY NOTICE
The information contained in this electronic message may contain confidential and privileged information and is intended only for use by the individual(s) or entity(ies) to whom it was addressed. Any unauthorized review, use, disclosure, or distribution of this communication is strictly prohibited. If you are not the intended recipient, please contact the sender by reply email and permanently delete and destroy the original message.
_____________________________________________
From: Ken Lassesen
Sent: Wednesday, May 30, 2007 4:10 PM
To: 'CPE Community Forum'
Subject: CPE components...
I noticed on http://cpe.mitre.org/, the statement
"a method for checking names against a system"
But I cannot see any documentation on how to do it, i.e. given a CPE Name, how do I check if I have this system --- I am assuming that "method" here means a mechanical process...
Ken Lassesen,
HomeOffice: 360-297-4717 Cell: 360-509-2402 Fax: 928-832-6836
IM: [hidden email] [hidden email]
[hidden email]
CONFIDENTIALITY NOTICE
The information contained in this electronic message may contain confidential and privileged information and is intended only for use by the individual(s) or entity(ies) to whom it was addressed. Any unauthorized review, use, disclosure, or distribution of this communication is strictly prohibited. If you are not the intended recipient, please contact the sender by reply email and permanently delete and destroy the original message.
