Full Disclosure mailing list archives
Re: SecNiche : Microsoft Internet Explorer Pop up Blocker Bypassing and Dos Vulner
From: "Steven M. Christey" <coley () linus mitre org>
Date: Wed, 15 Aug 2007 17:10:48 -0400 (EDT)
On Wed, 15 Aug 2007, security curmudgeon wrote:
OSVDB did not begin agressively tracking and cataloging myth/fake vulnerabilities until earlier this year.
CVE began a similar practice by using a "** DISPUTED **" or "** REJECT **" string in the descriptions.
OSVDB will add legitimate vulnerabilities before myth/fake typically, so in some cases they are just at the bottom of the queue.
Same with CVE; so if we've determined that a researcher has a very bad track record, we'll de-prioritize them on our queue. We don't keep a specific list of reliable/unreliable researchers, however. A resource like that would be very useful. Some unreliable researchers do improve, however. - Steve _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Re: SecNiche : Microsoft Internet Explorer Pop up Blocker Bypassing and Dos Vulner Jimby Sharp (Aug 15)
- Re: SecNiche : Microsoft Internet Explorer Pop up Blocker Bypassing and Dos Vulner security curmudgeon (Aug 15)
- Re: SecNiche : Microsoft Internet Explorer Pop up Blocker Bypassing and Dos Vulner Steven M. Christey (Aug 15)
- Re: SecNiche : Microsoft Internet Explorer Pop up Blocker Bypassing and Dos Vulner security curmudgeon (Aug 15)