The Purpose of Tracking Numbers.. (Sun)

[This was originally published on the OSVDB blog.]

Early in 2006, I posted about HP using multiple identifiers for the same vulnerability. Recently, Sun Microsystems has done a little overhaul to their advisory pages and I noticed that they too now use entirely too many tracking numbers.

For example, this Sun advisory has the following:

  1. Document ID: 200582
  2. Old Document ID: (formerly 103143)
  3. Bug ID: 6497289
  4. SA Document Body: PPGNRLA Internal ID use only.

Why is one tracking number so difficult?