Home page logo
/

bugtraq logo Bugtraq mailing list archives

Re: CERT does it again.
From: dynamo () IME NET (dynamo () IME NET)
Date: Tue, 22 Jul 1997 16:54:26 -0400


I had checked that site many days after and did not see it there.  Im glad
it was done, but that still doesnt make up for the fact that you guys
released the hole to an open list? (isnt it?)  Your workaround was wrong..
dynamo

On Tue, 22 Jul 1997, Lawrence R. Rogers wrote:

-----BEGIN PGP SIGNED MESSAGE-----


Im really let down by CERT.  From now on im posting straight to bugtraq.

To CERT: i told you about this hole.  Without me, you wouldnt have known,
and the least you could do is get me the credit i deserved.

The initial posting of these bulletins on July 15 did not include attribution
to Aaron.  When he drew our attention to the fact that we had not credited
him, updated bulletins were posted on July 17. These bulletins are available
from:

      ftp://info.cert.org/pub/cert_bulletins/VB-97.05.lynx
      ftp://info.cert.org/pub/cert_bulletins/VB-97.06.lynx

Note that Aaron's post to bugtraq is dated July 22.

Aaron: we apologize for not letting you know that these updates had been made
and made available on our FTP archive.

FYI: here are the current credits as they appear in the updated bulletins:

 VB-97.05.lynx
  The CERT Coordination Center staff thanks Aaron of Internet Maine for
  reporting the problem and thanks Jim Spath and his lynx-dev colleagues for
  their cooperation in developing this bulletin.

 VB-97.06.lynx
  The CERT Coordination Center staff thanks Aaron of Internet Maine for
  calling our attention to the problem and thanks Jim Spath and his lynx-dev
  colleagues for their cooperation in developing this bulletin.
- --

                                      Larry Rogers
                                      Member of the Technical Staff
                                      CERT* Coordination Center
                                      Software Engineering Institute
                                      Carnegie Mellon University
                                      4500 Fifth Avenue
                                      Pittsburgh, PA  USA  15213-3890

Internet e-mail:  cert () cert org
      (monitored during business hours)
Telephone:  +1 412-268-7090
      (24-hour hotline
      CERT Coordination Center personnel answer
      8:30 a.m.- 5:00 p.m. EST(GMT-5)/EDT(GMT-4)
      on call for emergencies during other hours)


Registered U.S. Patent and Trademark Office

The CERT Coordination Center is part of the Software Engineering
Institute (SEI). The SEI is sponsored by the Department of Defense.



-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQCVAwUBM9UWVnVP+x0t4w7BAQGAgQP/VKZe4UadZO1fjLtg+I6Pb3rXTCZnyE2M
+jfL1J/nrt0rO582+Mg3nPZ5YkqhWhYKRN1+DSh8HyokrXVh+cc9totHSm5sz9e2
shE9CdzWHFNfJr9KAi99hjweQK8v3+7Iu9+LX7bIBpx+enTSboXGmGhjubG0eClf
SC1K9orpPjE=
=SydU
-----END PGP SIGNATURE-----





  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault