Full Disclosure mailing list archives

Re: menalto gallery: Session hijacking vulnerability, CVE-2008-3662

From: Hanno Böck <hanno () hboeck de>
Date: Sat, 20 Sep 2008 09:34:57 +0200

Am Donnerstag 18 September 2008 schrieb Valdis.Kletnieks () vt edu:

Now if the next 47 things they find are *also* in lame products that nobody
uses, then you'd have a point...


IMHO there's nothing wrong publishing tons of vulns in "lame products" 
(whatever that should mean), why shouldn't less important apps also become 
more secure?

(A quick google shows that Hanno recently scored a CVE against clamav,
which certainly isn't a lame unused package. Might want to reconsider that
"lame fuck" label...)


And while the gallery team even payed me a bounty for a "lame issue", clamav 
didn't even bother to give me credits.

-- 
Hanno Böck              Blog:           http://www.hboeck.de/
GPG: 3DBD3B20           Jabber/Mail:    hanno () hboeck de

Attachment: signature.asc
Description: This is a digitally signed message part.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread:

menalto gallery: Session hijacking vulnerability, CVE-2008-3662 Hanno Böck (Sep 18)
- Re: [Full-disclosure] menalto gallery: Session hijacking vulnerability,CVE-2008-3662 Kristo pher (Sep 18)
  - Re: [Full-disclosure] menalto gallery: Session hijacking vulnerability,CVE-2008-3662 Valdis . Kletnieks (Sep 18)
    - Re: menalto gallery: Session hijacking vulnerability, CVE-2008-3662 Hanno Böck (Sep 20)