oss-sec mailing list archives

Moving in the wrong direction [was: Re: VENOM - CVE-2015-3456]

From: mancha <mancha1 () zoho com>
Date: Thu, 14 May 2015 08:01:57 +0000

On Wed, May 13, 2015 at 10:05:00PM +0000, Jason Geffner wrote:

We considered different ways of publicly sharing that technical
information post-embargo and ultimately decided that providing greater
details about the vulnerability and attack vectors would be better
published by members of the community external to CrowdStrike.


"Post-embargo" takes on a new meaning when there's not full disclosure
once the embargo ends.

--mancha

Attachment: _bin
Description:

Current thread:

VENOM - CVE-2015-3456 Jason Geffner (May 13)
- Re: VENOM - CVE-2015-3456 Solar Designer (May 13)
  - Re: VENOM - CVE-2015-3456 Sebastian Pipping (May 13)
  - RE: VENOM - CVE-2015-3456 Jason Geffner (May 13)
    - Moving in the wrong direction [was: Re: VENOM - CVE-2015-3456] mancha (May 14)
  - RE: VENOM - CVE-2015-3456 Jason Geffner (May 14)
- Re: VENOM - CVE-2015-3456 Solar Designer (May 13)
  - Re: VENOM - CVE-2015-3456 Marcus Meissner (May 13)