Security Issue Found
- From: "Ole Kristian Bangås" <olekristian.bangas@xxxxxxxxxxxxxx>
- Date: Tue, 20 Dec 2005 14:25:30 -0800
After having been in contact with Microsoft Support in various countries,
both by mail and phone, what I was told to do is to post here.
Given that a few prerequisites are in place, I'm able to grant myself
access to data that I'm explicitly denied access to. No big surprise, this
is not the way it is supposed to be. I desperately want to get in touch
with someone working with security issues in Microsoft, as I do NOT want
the details to go public. But, before that happens, I have to thoughs:
- Why do I either have to pay and open a support case to report security
issues, or (even worse)
- Go public on this newsgroup?
I would strongly suggest that Microsoft make some "slightly" easier way to
report security issues with their software. I'm SO close to go public with
all the detials first, since it's so troublesome to report issues directly
to Microsoft.
Well, that's all for now.
--
Ole Kristian Bangås
MCT, MCDBA, MCDST, MCSE:Security, MCSE:Messaging
.
- Follow-Ups:
- Re: Security Issue Found
- From: Steve Kass
- Re: Security Issue Found
- From: Dan Guzman
- Re: Security Issue Found
- Prev by Date: Re: netstat on my server
- Next by Date: Re: Security Issue Found
- Previous by thread: Re: Audit Log
- Next by thread: Re: Security Issue Found
- Index(es):
Relevant Pages
|
