topic Some advisories have incorrectly formatted product fields in Services Discussions

Some advisories have incorrectly formatted product fields

mjimmieson — Tue, 20 Dec 2016 11:37:52 GMT

Hi,

I've written a VBA module to download and import the cvrf and oval data into Access 2010

I've noticed the following advisories in cvrf xml have incorrectly formatted product fields

cisco-sa-19980122-aaapair

<productName>Analog Signaling (E &amp</productName>

cisco-sa-20110601-ac

<productName>charset=UTF-8"/> ... </productName>

<productName> Services" ... </productName>

cisco-sa-20070829-ccm

<productName>Analog Signaling (E &amp</productName>

Thanks

Re: Some advisories have incorrectly formatted product fields

Omar Santos — Tue, 10 Jan 2017 06:53:54 GMT

Thank you for reporting this to us. We are looking into the problem. It looks like this only affects advisories published prior to 2012. We will update you once we have resolved the issue. Thank you!

Re: Some advisories have incorrectly formatted product fields

mjimmieson — Tue, 10 Jan 2017 21:54:08 GMT

Thanks Omar - one of those product strings is about 7,000 1,875 characters which throws an error on text field limit of 255 when importing.

Also how is the software checker API coming along ? - it's the missing piece of the puzzle

Thanks

Re: Some advisories have incorrectly formatted product fields

Omar Santos — Tue, 10 Jan 2017 22:09:14 GMT

Thank you mjimmieson!

Yes indeed! Most of those are legacy advisories imported from an older system. We are working on removing the product associations from them. Some of those date back to 1998 😉

Regarding the integration with IOS software checker, I have great news! We now have the full integration!

I documented this in the following document and we will also have reference client code available in GitHub for the new support.

Cisco PSIRT openVuln API and Cisco IOS Software Checker

Thanks again!

Omar