Re: [Full-disclosure] [VulnDiscuss] Re: -==phpBB 2.0.14 Multiple Vulnerabilities==-[Scanned]

To: Paul Laudanski <zx@xxxxxxxxxxxxxx>
Subject: Re: [Full-disclosure] [VulnDiscuss] Re: -==phpBB 2.0.14 Multiple Vulnerabilities==-[Scanned]
From: Dave Aitel <dave@xxxxxxxxxxxxxxx>
Date: Sun, 24 Apr 2005 13:23:09 -0400
Cc: link@xxxxxxxxxxxxxxxxx, full-disclosure@xxxxxxxxxxxxxxxxx, bugtraq@xxxxxxxxxxxxxxxxx, vulndiscuss@xxxxxxxxxxxxx
In-reply-to: <000001c5485c$6544b580$7d00a8c0@xxxxxxxxxxxxxxxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
References: <000001c5485c$6544b580$7d00a8c0@xxxxxxxxxxxxxxxxxxxxxxx>
User-agent: Mozilla Thunderbird 1.0.2 (X11/20050317)

Paul Laudanski wrote:

Risk: Low Risk!!
Impact: Multiple Vulnerabilities.

      -==phpBB 2.0.14 Multiple Vulnerabilities==-
Unsure if its me, but I didn't see a vendor notification here? Might bebecause I'm so happy being a proud new dad, but, I thought properdisclosure etiquette involved vendor notification and time to testproperly, and waiting for a patch to be released?
Whatever happened to that?

Nothing happened to that - it was never true. Those of us who find bugswould really appreciate it if every Microsoft MVP would stopastroturfing these lists about it too.

Thanks,
Dave Aitel
Immunity, Inc.

Prev by Date: WoltLab Burning Board <= 2.3.1 PL2 - XSS Vulnerability (24.04.05)
Next by Date: remote command execution in ad.cgi script
Previous by thread: WoltLab Burning Board <= 2.3.1 PL2 - XSS Vulnerability (24.04.05)
Next by thread: remote command execution in ad.cgi script
Index(es):
- Date
- Thread