oss-sec mailing list archives

Re: Major DNS vulnerability announced [CVE Question]


From: The Fungi <fungi () yuggoth org>
Date: Wed, 9 Jul 2008 01:08:07 +0000

On Tue, Jul 08, 2008 at 04:26:14PM -0800, Jonathan Smith wrote:
BIND's advisory sounds suspiciously similar (indeed, until you
sent this email, I didn't even consider that they were different).
[...]

My understanding is that this was a coordinated/embargoed patch
announcement date among several vendors, including both ISC and
Microsoft, the reasons for which will become more apparent when Dan
presents at Black Hat next month.
-- 
{ IRL(Jeremy_Stanley); PGP(9E8DFF2E4F5995F8FEADDC5829ABF7441FB84657);
SMTP(fungi () yuggoth org); IRC(fungi () irc yuggoth org#ccl); ICQ(114362511);
AIM(dreadazathoth); YAHOO(crawlingchaoslabs); FINGER(fungi () yuggoth org);
MUD(fungi () katarsis mudpy org:6669); WWW(http://fungi.yuggoth.org/); }


Current thread: