Full Disclosure mailing list archives

Re: mnogosearch 3.1.20 and 3.2.10 buffer overflow

From: "Larry W. Cashdollar" <lwc () vapid ath cx>
Date: Tue, 10 Jun 2003 09:34:23 -0400 (EDT)


I thought full disclosure meant none of the details would be held back,
any code or information that could possibly be used for malicious purposes
would be posted along with the advisory/discussion content.

My apology if I am mistaken.

-- Larry C$


 5 months...  This is full disclosure?
 "there was a hole, now its fixed"
 why even bother posting.. kinda sounds like a idefense tactic..
FULL DISCLOSURE  means just that dosent it?

 I dont get it?

morning_wood


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

Current thread:

mnogosearch 3.1.20 and 3.2.10 buffer overflow pokleyzz (Jun 10)
- Re: mnogosearch 3.1.20 and 3.2.10 buffer overflow morning_wood (Jun 10)
  - Re: mnogosearch 3.1.20 and 3.2.10 buffer overflow John Cartwright (Jun 10)
  - Re: mnogosearch 3.1.20 and 3.2.10 buffer overflow Larry W. Cashdollar (Jun 10)
- <Possible follow-ups>
- Re: mnogosearch 3.1.20 and 3.2.10 buffer overflow Steven M. Christey (Jun 10)
  - (offtopic) datestamp formats and timezones Justin (Jun 10)