Bugtraq mailing list archives
Re: CERT does it again.
From: dynamo () IME NET (dynamo () IME NET)
Date: Tue, 22 Jul 1997 16:54:26 -0400
I had checked that site many days after and did not see it there. Im glad it was done, but that still doesnt make up for the fact that you guys released the hole to an open list? (isnt it?) Your workaround was wrong.. dynamo On Tue, 22 Jul 1997, Lawrence R. Rogers wrote:
-----BEGIN PGP SIGNED MESSAGE-----Im really let down by CERT. From now on im posting straight to bugtraq. To CERT: i told you about this hole. Without me, you wouldnt have known, and the least you could do is get me the credit i deserved.The initial posting of these bulletins on July 15 did not include attribution to Aaron. When he drew our attention to the fact that we had not credited him, updated bulletins were posted on July 17. These bulletins are available from: ftp://info.cert.org/pub/cert_bulletins/VB-97.05.lynx ftp://info.cert.org/pub/cert_bulletins/VB-97.06.lynx Note that Aaron's post to bugtraq is dated July 22. Aaron: we apologize for not letting you know that these updates had been made and made available on our FTP archive. FYI: here are the current credits as they appear in the updated bulletins: VB-97.05.lynx The CERT Coordination Center staff thanks Aaron of Internet Maine for reporting the problem and thanks Jim Spath and his lynx-dev colleagues for their cooperation in developing this bulletin. VB-97.06.lynx The CERT Coordination Center staff thanks Aaron of Internet Maine for calling our attention to the problem and thanks Jim Spath and his lynx-dev colleagues for their cooperation in developing this bulletin. - -- Larry Rogers Member of the Technical Staff CERT* Coordination Center Software Engineering Institute Carnegie Mellon University 4500 Fifth Avenue Pittsburgh, PA USA 15213-3890 Internet e-mail: cert () cert org (monitored during business hours) Telephone: +1 412-268-7090 (24-hour hotline CERT Coordination Center personnel answer 8:30 a.m.- 5:00 p.m. EST(GMT-5)/EDT(GMT-4) on call for emergencies during other hours) Registered U.S. Patent and Trademark Office The CERT Coordination Center is part of the Software Engineering Institute (SEI). The SEI is sponsored by the Department of Defense. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBM9UWVnVP+x0t4w7BAQGAgQP/VKZe4UadZO1fjLtg+I6Pb3rXTCZnyE2M +jfL1J/nrt0rO582+Mg3nPZ5YkqhWhYKRN1+DSh8HyokrXVh+cc9totHSm5sz9e2 shE9CdzWHFNfJr9KAi99hjweQK8v3+7Iu9+LX7bIBpx+enTSboXGmGhjubG0eClf SC1K9orpPjE= =SydU -----END PGP SIGNATURE-----
Current thread:
- CERT does it again. dynamo () IME NET (Jul 22)
- Re: CERT does it again. Alfred Huger (Jul 22)
- <Possible follow-ups>
- Re: CERT does it again. Lawrence R. Rogers (Jul 22)
- Re: CERT does it again. dynamo () IME NET (Jul 22)
- Re: CERT does it again. Alfred Huger (Jul 22)