full-disclosure - Advisory 02/2004: Trillian remote overflows -> maybe this is off-topic, but...

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: s.esser at e-matters.de (Stefan Esser)
Subject: Advisory 02/2004: Trillian remote overflows	-> maybe this is off-topic, but...

Hi,

> Now I'm sick of looking through commit logs, but I think you get the
> idea.  Also, by this point, Trillian is sending us code, not
> vice-versa.  The only code that was ever sent to them was the auth code,
> which Sean wrote.  Sean is allowed to send that code to anyone he
> pleases.  As much of a stickler as he is for the GPL, I really don't
> think he'd violate it so blatently and publically.

Ehmm do I read correctly what you just wrote? The ONLY code that was ever sent
to them was the auth code? Okay so you actually just have said the same my
advisory says: Code that was never given to Trillian and was written by the
Gaim project is in Trillian.

Thank you

Stefan




-- 

--------------------------------------------------------------------------
 Stefan Esser                                        s.esser@...atters.de
 e-matters Security                         http://security.e-matters.de/

 GPG-Key                gpg --keyserver pgp.mit.edu --recv-key 0xCF6CAE69 
 Key fingerprint       B418 B290 ACC0 C8E5 8292  8B72 D6B0 7704 CF6C AE69
--------------------------------------------------------------------------
 Did I help you? Consider a gift:            http://wishlist.suspekt.org/
--------------------------------------------------------------------------