Vulnerability Development mailing list archives

Re: Telnetd exploit for solaris


From: "Josh Crane" <jcrane () bit net au>
Date: Fri, 7 Sep 2001 10:44:37 +1000

well said..

Or, maybe the exploit is needed to test the patch after it's
applied, to make sure it actually worked to close the hole...
It's not unknown for vendors to release faulty patches that
don't do what they claim, either...

even better as it's more common than people realise.. often the exploits
only need a minor alteration to be reborn anyway.

if you are just a thoughtless admin, and don't attempt to pick up what it is
that the exploits are doing, you will always rely on someone else to get it
done for you... this is a community, pitching in is what it's all about.


Current thread: