Re: [Full-disclosure] Privilege escalation in Network Associates ePolicy Orchestrator Agent 3.5.0 (patch 3)

[sec-list () nolog org]

Hello,

Reed Arvin wrote:
> However, they are a large company. Things can slip through the cracks
> I guess. As to the statement that was made about not following
> "standard industry practices", I could only assume that they would add
> that to save face. 

ACK.

From my experience, they are not that fast in developing patches, and I 
don't think anything slipped trough - but propably the information was 
disclosed too fast for McAfee. Maybe they'll answer next time a little 
bit faster... ;)

-- nobnop