VU#197395

From: CERT(R) Coordination Center (cert@cert.org)
Date: 07/15/02 

From: "CERT(R) Coordination Center" <cert@cert.org>
Date: Mon, 15 Jul 2002 14:04:39 -0400 .
To: jason@senseofsecurity.com.au

-----BEGIN PGP SIGNED MESSAGE-----

Hello Jason, et al.

> This vulnerability was discovered during a penetration test in mid
> may. It was published to both the BUGTRAQ and VULN-DEV forums 45
> days after it was published to both CERT and Microsoft. Confirmation
> of their reciept of this was delivered on the 29th of May
> 2002. Sorry mate, beat you to the punch by about 2 months. If you
> would like to check the CERT internal Reference Number is VU#197395.

Liam is correct. This issue was reported to the CERT/CC by
<TLR@portcullis-security.com> on 5/29/02.

We have not yet had a chance to publish information regarding this
vulnerability.

Regards,
Ian

Ian Finlay
Internet Systems Security Analyst - CERT/CC Operations
Networked Systems Survivability Program
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
CERT (R) Coordination Center Email: cert@cert.org
Software Engineering Institute WWW: http://www.cert.org
Carnegie Mellon University Hotline: +1-412-268-7090
Pittsburgh, PA USA 15213-3890 FAX: +1-412-268-6989
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 5.0i for non-commercial use
Charset: noconv

iQCVAwUBPTMQZaCVPMXQI2HJAQE5aAP/QaLK8y2wIgQ1/MDV6AL+PvrJ9GK+rufU
/rn2uBLdZ6aVCdgpKEBqQYSYC94cOFWDEWNxufQ1lH1nAyXPCJ2rmG2xV/GgqLMv
RPYMWedBzjk0UqR7s+LlBiaNBgJQ4F5KEGf+dVLEJ24oATLziRs3fD5SjIRoQXfz
PvXACP/SGpU=
=OLeg
-----END PGP SIGNATURE-----