Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Re: [Full-disclosure] ZDI-06-043: Novell Netware Client Print Provider Buffer Overflow Vulnerability |
|---|---|
| Date: | Thu, 30 Nov 2006 08:02:45 -0500 |
On 11/29/06, zdi-disclosures@3com.com <zdi-disclosures@3com.com> wrote:
ZDI-06-043: Novell Netware Client Print Provider Buffer Overflow
Vulnerability
http://www.zerodayinitiative.com/advisories/ZDI-06-043.html
November 29, 2006
<snip>
-- Disclosure Timeline: 2005.07.07 - Digital Vaccine released to TippingPoint customers 2006.10.02 - Vulnerability reported to vendor 2006.11.29 - Coordinated public release of advisory
you waited over a year to report it to the vendor? sounds like analyzing your digital vaccine rules might yield a slew of reproducible 0 days that vendors are unaware of..... -JP<who is admittedly unaware of the tippingpoint vaccine format, and about how much info can be gleaned from it> _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | Re: PHP Event Calendar 1.5.1 (index.php) Remote File Include Vulnerability, Stuart Moore |
|---|---|
| Next by Date: | [Full-disclosure] msf3 3Com TFTP exploit, Kurt Grutzmacher |
| Previous by Thread: | [Full-disclosure] ZDI-06-043: Novell Netware Client Print Provider Buffer Overflow Vulnerability, zdi-disclosures |
| Next by Thread: | Re: [Full-disclosure] ZDI-06-043: Novell Netware Client Print Provider Buffer Overflow Vulnerability, zdi-disclosures |
| Indexes: | [Date] [Thread] [Top] [All Lists] |