RE: [Full-disclosure] Mozilla Firefox "Host:" Buffer Overflow

From: Larry Seltzer (larry_at_larryseltzer.com)
Date: 09/09/05

  • Next message: Martin Pitt: "[Full-disclosure] [USN-179-1] openssl weak default configuration" 
    To: "'Dave Aitel'" <dave@immunitysec.com>
Date: Fri, 9 Sep 2005 11:09:25 -0400

    >>Right now, everyone knows they are at risk, and what to do about it - we
    can stop using Firefox if we think it's a high enough risk vulnerability to
    do so. This is definately better than just being in the dark for another
    week or so until they get the patch done.

    Whatever. My point was that he treated the two situations differently. Why?

    Larry Seltzer
    eWEEK.com Security Center Editor
    http://security.eweek.com/
    http://blog.ziffdavis.com/seltzer
    Contributing Editor, PC Magazine
    larryseltzer@ziffdavis.com

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.grok.org.uk/full-disclosure-charter.html
    Hosted and sponsored by Secunia - http://secunia.com/

  • Next message: Martin Pitt: "[Full-disclosure] [USN-179-1] openssl weak default configuration"

    Relevant Pages