Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 17 May 1996 09:52:26 -0700 (PDT)
From:      invalid opcode <coredump@nervosa.com>
To:        Danny Smith <danny@auscert.org.au>
Cc:        Vladimir Jojic <vjojic@eunet.yu>, freebsd-security@freebsd.org
Subject:   Re: very bad 
Message-ID:  <Pine.BSF.3.91.960517095034.21586J-100000@onyx.nervosa.com>
In-Reply-To: <199605171217.WAA11280@amethyst.auscert.org.au>

next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, 17 May 1996, Danny Smith wrote:

> Another unfortunate part is that it is approaching midnight in Australia
> (and it is now past midnight in New Zealand) at the start of the weekend.
> Posting vulnerbility information like this has not helped any system
> administrators if they are all home for the weekend.  All it has done
> is increase the exposure of their systems to attack by more poeple.
> 
> I personally don't think that is helping anyone at all.
> 
> Danny Smith.

First off, I wouldn't have posted it had it been a secret little bug. But 
it wasn't, it was already out on 2 mailing lists which probably have 
close to 10,000 people on them, 50% of which are people who LOOK for 
these types of bugs so they can login to their accounts running FreeBSD 
and exploit it. At this point, the more exposure it gets, the more 
root@vulnerablehost will hear about it and fix it.

== Chris Layne ======================================== Nervosa Computing ==
== coredump@nervosa.com ================ http://www.nervosa.com/~coredump ==




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.91.960517095034.21586J-100000>