VU#197395

["CERT(R) Coordination Center" <cert () cert org>]

-----BEGIN PGP SIGNED MESSAGE-----

Hello Jason, et al.

> This vulnerability was discovered during a penetration test in mid
> may. It was published to both the BUGTRAQ and VULN-DEV forums 45
> days after it was published to both CERT and Microsoft. Confirmation
> of their reciept of this was delivered on the 29th of May
> 2002. Sorry mate, beat you to the punch by about 2 months. If you
> would like to check the CERT internal Reference Number is VU#197395.

Liam is correct. This issue was reported to the CERT/CC by
<TLR () portcullis-security com> on 5/29/02.

We have not yet had a chance to publish information regarding this
vulnerability.

Regards,
Ian

Ian Finlay
Internet Systems Security Analyst - CERT/CC Operations 
Networked Systems Survivability Program
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
CERT (R) Coordination Center             Email: cert () cert org
Software Engineering Institute           WWW: http://www.cert.org
Carnegie Mellon University               Hotline: +1-412-268-7090
Pittsburgh, PA  USA  15213-3890          FAX: +1-412-268-6989
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=




-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 5.0i for non-commercial use
Charset: noconv

iQCVAwUBPTMQZaCVPMXQI2HJAQE5aAP/QaLK8y2wIgQ1/MDV6AL+PvrJ9GK+rufU
/rn2uBLdZ6aVCdgpKEBqQYSYC94cOFWDEWNxufQ1lH1nAyXPCJ2rmG2xV/GgqLMv
RPYMWedBzjk0UqR7s+LlBiaNBgJQ4F5KEGf+dVLEJ24oATLziRs3fD5SjIRoQXfz
PvXACP/SGpU=
=OLeg
-----END PGP SIGNATURE-----