Re: Nine Vista CVEs, including Microsoft inaccurate Teredo use case documentation

2007-04-07 Thread GomoR
On Tue, Apr 03, 2007 at 02:23:21PM -0700, Jim Hoagland wrote: [..] > [2] > http://www.symantec.com/avcenter/reference/Vista_Network_Attack_Surface_RTM. > pdf ( http://preview.tinyurl.com/2qrglc ) Hello Jim, you have a section on stack fingerprint in your report. I find it rather odd to no see the

Re: Nine Vista CVEs, including Microsoft inaccurate Teredo use case documentation

2007-04-06 Thread Jim Hoagland
FWIW, the unknown third party that requested the CVEs turns out to be MITRE, the government contractor that provides operational support for CVE. They independently assigned the CVEs after reading the report. Microsoft has not updated their documentation yet. -- Jim On 4/3/07 2:23 PM, "Jim Hoag

Nine Vista CVEs, including Microsoft inaccurate Teredo use case documentation

2007-04-03 Thread Jim Hoagland
Hello all, In my blog today [1] I give a brief run-down of nine CVE entries that were recently published for Vista; the CVEs are numbered CVE-2007-1527 through CVE-2007-1535. At this point, I do not know who requested the entries be created. However, the entries are based on items reported in Sy