Re: Linux Privilege Escalation exploits

["Christian Swartzbaugh" <feofil () gmail com>]

> It is better to provide concise, complete, and accurate information
> about vectors of attack and the potential results of those attacks to
> allow people to make their own decisions.

Ratings are useful assuming they use distribution of the software and
the potential for damage as the biggest factors. This information
gives you an idea of how big an impact it could have and how many
computers are affected.

You could let people decide for themselves, but the amount of alerts
is too overwhelming for most people and it makes sense to limit what
they can see based on the risk it causes to them based on an estimated
threat level for the bigger picture.

feofil

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/