full-disclosure - iDEFENSE Security Advisory 11.08.02b: Non-Explicit Path Vulnerability in QNX Neutrino RTOS

lists.openwall.net		lists / announce john-users owl-users popa3d-users / xvendor oss-security / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4
Open Source and information security mailing list archives

This website is powered by Openwall GNU/*/Linux security-enhanced OS

[<prev] [next>] [month] [year] [list]

From: dendler at idefense.com (David Endler)
Subject: iDEFENSE Security Advisory 11.08.02b: Non-Explicit Path Vulnerability in QNX Neutrino RTOS

Thanks for pointing out the typo, the date should have read 
January, 2003. The advisory has been updated on the web site.

-dave

> -----Original Message-----
> From: Erik Parker [mailto:eparker@...dsec.com]
> Sent: Saturday, November 09, 2002 5:32 AM
> To: David Endler
> Cc: full-disclosure@...ts.netsys.com
> Subject: Re: [Full-Disclosure] iDEFENSE Security Advisory 
11.08.02b:
> Non-Explicit Path Vulnerability in QNX Neutrino RTOS
> 
> 
> > VI. VENDOR FIX
> >
> > QNX Neutrino RTOS 6.2.1, which is slated to be released in 
January
> > 2002, should fix this vulnerability. According to QNX, 
concerned
> > customers can contact their sales rep for an advance copy.
> 
> Damn, I need a dev team that can create patches 11 months in 
> the past.. That's
> what I call being on top of their game.
> 
> You're pathetic David.
>