Re: Scanners and unpublished vulnerabilities - Full Disclosure

[Renaud Deraison <deraison () nessus org>]

On Tue, May 28, 2002 at 12:05:43PM -0600, Alfred Huger wrote:
> In brief they are now unloading limited details to the public about
> vulnerabilities they have notified vendors about.

I'm not surprised - three years ago, I said that would happen[1],
although I was expecting tighter cooperation between producers of
security holes (software vendors) and scanners. 

When antivirus publishers have been accused of _secretely_ funding the
developement of new virii, they have been slammed by everyone. Oddly, 
scanning for unknown vulnerabilities seems to be something worth to brag
about.
                                -- Renaud

[1] http://security-archive.merton.ox.ac.uk/bugtraq-199907/0014.html

-- 
Renaud Deraison
The Nessus Project
http://www.nessus.org


----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/