What is the difference between CVE Identifiers and Bugtraq IDs?
Bugtraq IDs are identifiers for a commercially operated vulnerability database that are used in security advisories and alerts, as well as for discussions on the Bugtraq mailing list. CVE identifiers are from an international information security effort that is publicly available and free to use. CVE identifiers are for the sole purpose of providing a common name. For this reason, CVE Identifiers are frequently used by researchers and the makers of security tools, Web sites, databases, and services as a standard method for identifying vulnerabilities and for cross-linking with other repositories that also use CVE identifiers. CVE identifiers with candidate status are used in the same manner as CVE Identifiers with entry status, since many of them will eventually be officially added to the CVE List as official CVE entries. Note also that SecurityFocus, which runs Bugtraq, is a member of the CVE Editorial Board, includes CVE Identifiers in its security announcements, and is listed on the
