Q

CAN vs. CVE numbers

Security expert James Turnbull explains the difference between CAN and CVE numbers assigned to vulnerabilities and bugs.

What are CAN and CVE numbers? What are the differences between them?

CAN and CVE numbers are assigned to security-related vulnerabilities and bugs. CVE stands for Common Vulnerabilities and Exposures. It is not, as is traditionally assumed, a database but rather, a dictionary of terms. It provides a standardized list of names and definitions for vulnerabilities and exposures and a centralized language for defining vulnerabilities. CVE numbers are assigned to vulnerabilities, for example CVE-1999-006...

7.

CVE and CAN numbers were developed as a community effort and are managed by the MITRE Corporation. CANs are candidate CVE entries. Perhaps they have not yet been fully investigated or understood and, until this occurs, they are assigned CAN numbers rather than CVE numbers. You can read about this in more detail by clicking here.

This was first published in December 2005

Dig deeper on Linux security risks and threats

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

0 comments

Oldest 

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:

-ADS BY GOOGLE

SearchDataCenter

SearchServerVirtualization

SearchCloudComputing

SearchEnterpriseDesktop

Close