Full Disclosure mailing list archives
Re: Vendor non-acknowledgement
From: Florian Weimer <fw () deneb enyo de>
Date: Tue, 30 Sep 2003 18:07:24 +0200
On Tue, Sep 30, 2003 at 09:37:53AM -0500, Kent A wrote:
Novell recently put out security release (http://support.novell.com/cgi-bin/search/searchtid.cgi?/10087316.htm) based upon my notifications to them. Do most vendors acknowledge security professionals that bring vulnerabilities to them?
I can understand that a company such as Novell doesn't want to credit "Kent A <bowulf () myrealbox com>" with the discovery of a software vulnerability. _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Vendor non-acknowledgement Kent A (Sep 30)
- Re: Vendor non-acknowledgement Florian Weimer (Sep 30)
- Re: Vendor non-acknowledgement Giovanni Bobbio (Sep 30)
- Re: Vendor non-acknowledgement Nicob (Sep 30)
- <Possible follow-ups>
- Re: Vendor non-acknowledgement Steven M. Christey (Sep 30)
- Re: Vendor non-acknowledgement Florian Weimer (Sep 30)