On Thu, Sep 25, 2003 at 03:43:31PM -0700, William Lefkovics wrote: > A 'hole' doesn't exist until someone knows about it. > > That knowledge only became available with the latest patch.
Ahh, but there's the problem - how do you know who knows the details of the bug? Maybe someone with less reason to disclose than eEye found the overflow first. I don't want to kick-off the whole full-disclosure debate on here, as that's way off topic. But assuming that eEye are following responsible practices, they wont make the details public until Ipswitch have had a chance to fix affected versions for their customers. The fact that they havent released an advisory could be evidence that Ipswitch are working on further fixes?? -- Jon Miles <[EMAIL PROTECTED]> Cybah on IRC(net) To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
