Re: iDEFENSE Security Advisory 05.22.03: Authentication Bypass in iisPROTECT

["raj var" <secvar72 () hotmail com>]

> 12/31/2002  Issue disclosed to iDEFENSE
> 04/16/2003  E-mail sent to info () iisprotect com
> 04/16/2003  Response received from David Fearn of iisPROTECT
> 04/16/2003  Patch provided to iDEFENSE for verification
> 05/22/2003  Coordinated public disclosure

EMail sent and patch provided the same day. I hope iDefense had a few good 
reasons to hold on to this for over 100 days before even reporting it to the 
vendor.

SecVar

_________________________________________________________________
MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*.  
http://join.msn.com/?page=features/virus

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html