Skip to main content
Information Security

Return to Question

added 63 characters in body
Source Link
schroeder ♦
schroeder ♦
  • 132.1k
  • 55
  • 307
  • 348

I looked at the documentation for cpe Naming Specification Version 2.3

http://csrc.nist.gov/publications/nistir/ir7695/NISTIR-7695-CPE-Naming.pdf

Specification says, "*" or "-" is explained as "ANY" or "NA", but. (6.1.2.2 Summary of algorithm)

But the "?" The mark is simply a special character that can be handled by other CPE specifications. It appears that "?", "??" It appears that these two cases can be used, but (5.3.2 Restrictions on attribute-value strings).

I wonder if this has the same meaning as regular expressions. Then Then I wonder why they didn't write that down in the specification document.

I looked at the documentation for cpe Naming Specification Version 2.3

http://csrc.nist.gov/publications/nistir/ir7695/NISTIR-7695-CPE-Naming.pdf

Specification says, "*" or "-" is explained as "ANY" or "NA", but "?" The mark is simply a special character that can be handled by other CPE specifications. "?", "??" It appears that these two cases can be used, but I wonder if this has the same meaning as regular expressions. Then I wonder why they didn't write that down in the specification document.

I looked at the documentation for cpe Naming Specification Version 2.3

http://csrc.nist.gov/publications/nistir/ir7695/NISTIR-7695-CPE-Naming.pdf

Specification says, "*" or "-" is explained as "ANY" or "NA". (6.1.2.2 Summary of algorithm)

But the "?" is simply a special character that can be handled by other CPE specifications. It appears that "?", "??" can be used (5.3.2 Restrictions on attribute-value strings).

I wonder if this has the same meaning as regular expressions. Then I wonder why they didn't write that down in the specification document.

Source Link
june y
june y
  • 3
  • 2

What does a "?" mean in Common Product Enumeration (CPE)?

I looked at the documentation for cpe Naming Specification Version 2.3

http://csrc.nist.gov/publications/nistir/ir7695/NISTIR-7695-CPE-Naming.pdf

Specification says, "*" or "-" is explained as "ANY" or "NA", but "?" The mark is simply a special character that can be handled by other CPE specifications. "?", "??" It appears that these two cases can be used, but I wonder if this has the same meaning as regular expressions. Then I wonder why they didn't write that down in the specification document.