Re: mnogosearch 3.1.20 and 3.2.10 buffer overflow

["morning_wood" <se_cur_ity () hotmail com>]

----- Original Message -----
From: "pokleyzz" <pokleyzz () scan-associates net>
To: <full-disclosure () lists netsys com>
Sent: Monday, June 09, 2003 6:52 PM
Subject: [Full-disclosure] mnogosearch 3.1.20 and 3.2.10 buffer overflow
>
-------------- snippy -------------
> Vendor Response
> ===============
> Vendor has been contacted on 01/06/2003 and fix is available from cvs at
> http://www.mnogosearch.org.
------------ end snippy -----------

 5 months...  This is full disclosure?
 "there was a hole, now its fixed"
 why even bother posting.. kinda sounds like a idefense tactic..
FULL DISCLOSURE  means just that dosent it?

 I dont get it?

morning_wood

http://nothackers.org  Only Full Public Disclosure Reseachers Please
the general public is invited to contribute openly, and freely to
0day () nothackers org
lurkers may enjoy the archives -
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html