full-disclosure - Response from CERT regarding Linux Slapper worm

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20021031094353.GE29401@faveve.uni-stuttgart.de>
From: delta at faveve.uni-stuttgart.de (Helmut Springer)
Subject: Response from CERT regarding Linux Slapper worm

Hi,


On 31 Oct 2002 at 10:09 +0100, John.Airey@...b.org.uk wrote:
> Today I received an email response from CERT giving the following page
> detailing the vendor information for the status of OpenSSL updates.
> 
> http://www.kb.cert.org/vuls/id/102795#systems
> 
> Mind you, the page itself is a little obscure. I think it means to
> say that the vendor's version is vulnerable before the version
> released on the date given, but doesn't.

No.  The list shows vendor's reactions/statements regarding the
vulnerability and the date this statement was updated the last time.



> The observant will note that there is no link to this from 
> 
> http://www.cert.org/advisories/CA-2002-27.html

That includes a link to http://www.kb.cert.org/vuls/id/102795


Ok, it's early in the morning and you might take another coffee...


Cheers,

-- 
MfG/best regards, helmut springer
	
<Apatrix:#eu-opers> Yeah... German servers never split, Vesa is always right
                    and Fusion is God :)