vuln.xml to oval script?

[Mark Foster]

I have this some though a couple of years ago. Some of the attributes didn't seem to map cleanly. I think the conversion would be possible once the field map was figured out.
The date time and version representations in particular would need massaging.
Also I recall OVAL has some variations like remediation that go beyond what vuln.xml contains.


> On Sep 24, 2015, at 2:09 PM, Roger Marquis <marquis at roble.com> wrote:
> 
> Anyone familiar with the OS repositories for OVAL
> <http://oval.mitre.org/repository/>?  Considering how similar these dbs are to
> vuln.xml it seems odd that FreeBSD is not represented as a "supported
> operating system".
> 
> If any XML devs are reading this, how difficult would it be to write a
> translation script?
> 
> Roger Marquis
> 
> _______________________________________________
> freebsd-security at freebsd.org mailing list
> https://lists.freebsd.org/mailman/listinfo/freebsd-security
> To unsubscribe, send any mail to "freebsd-security-unsubscribe at freebsd.org"