-----BEGIN PGP SIGNED MESSAGE----- Hello Jason, et al. > This vulnerability was discovered during a penetration test in mid > may. It was published to both the BUGTRAQ and VULN-DEV forums 45 > days after it was published to both CERT and Microsoft. Confirmation > of their reciept of this was delivered on the 29th of May > 2002. Sorry mate, beat you to the punch by about 2 months. If you > would like to check the CERT internal Reference Number is VU#197395. Liam is correct. This issue was reported to the CERT/CC by <TLR@portcullis-security.com> on 5/29/02. We have not yet had a chance to publish information regarding this vulnerability. Regards, Ian Ian Finlay Internet Systems Security Analyst - CERT/CC Operations Networked Systems Survivability Program =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= CERT (R) Coordination Center Email: certat_private Software Engineering Institute WWW: http://www.cert.org Carnegie Mellon University Hotline: +1-412-268-7090 Pittsburgh, PA USA 15213-3890 FAX: +1-412-268-6989 =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 5.0i for non-commercial use Charset: noconv iQCVAwUBPTMQZaCVPMXQI2HJAQE5aAP/QaLK8y2wIgQ1/MDV6AL+PvrJ9GK+rufU /rn2uBLdZ6aVCdgpKEBqQYSYC94cOFWDEWNxufQ1lH1nAyXPCJ2rmG2xV/GgqLMv RPYMWedBzjk0UqR7s+LlBiaNBgJQ4F5KEGf+dVLEJ24oATLziRs3fD5SjIRoQXfz PvXACP/SGpU= =OLeg -----END PGP SIGNATURE-----
This archive was generated by hypermail 2b30 : Mon Jul 15 2002 - 12:45:04 PDT