FYI: CAIF Format Specification

• Previous message: Drew Copley: "RE: Re: is predicatable file location a vuln? (was RE: Aol Instant Messenger/Microsoft Internet Explorer remote code execution)"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Date: Sun, 22 Feb 2004 20:41:50 +0100
To: bugtraq@securityfocus.com

For Your Information:

a draft on the format specification of the Common Announcement
Interchange Format (CAIF) has been released.

The project started in 2002 and produced a requirements document, which
was released in January 2003 (it is available from the CAIF homepage).
Based on the requirements document, its discussion, and incorporating
the additional experience gained in the meantime, this draft, specifying
the format of CAIF, has been written.

It is available at:

 http://cert.uni-stuttgart.de/projects/caif/draft-goebel-caif-format.txt

From the abstract:
The draft describes an XML-based format for security announcements. It
defines a basic but comprehensive set of elements that is designed to
describe the main aspects of an issue related to security. Besides
addressing more than one problem within a single document the format
allows to provide information for more than one target group of readers
as well as multi-lingual textual descriptions. It can be used to
selectively produce different renderings of an announcement for the
intended target groups, addressing one, a sub-set, or all problems in
one or multiple languages. The set of pre-defined elements can be
extended to reflect either temporary, exotic or new requirements on a
per-document basis.

The DTD is available as a single file at:

      http://cert.uni-stuttgart.de/projects/caif/caif.dtd

If you wish to be kept informed about new documents released, or updates
made to the existing ones, subscribe to the "caif-announce" mailing list:

    * caif-announce@Lists.CERT.Uni-Stuttgart.DE
    
      To subscribe, send email to:
      caif-announce-subscribe@Lists.CERT.Uni-Stuttgart.DE

Comments are very welcome on the caif-discuss-list.

    * caif-discuss@Lists.CERT.Uni-Stuttgart.DE
     
      To subscribe, send email to:
      caif-discuss-subscribe@Lists.CERT.Uni-Stuttgart.DE

All documents are also available via the CAIF homepage at

      http://cert.uni-stuttgart.de/projects/caif/

   
Regards

-- 
Oliver Goebel                        mailto:Goebel@CERT.Uni-Stuttgart.DE
RUS-CERT Universitaet Stuttgart      Tel:+49 711 121-3678 / -3688 (fax)
Breitscheidstr. 2, 70174 Stuttgart   http://CERT.Uni-Stuttgart.DE/

• application/pgp-signature attachment: stored

• Previous message: Drew Copley: "RE: Re: is predicatable file location a vuln? (was RE: Aol Instant Messenger/Microsoft Internet Explorer remote code execution)"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]