Full Disclosure mailing list archives

Re: SHOUTcast Server 1.8.x remote heap overrun exploit binary version


From: Tim <full-disclosure () err0rr com>
Date: Tue, 24 Feb 2004 23:16:39 -0500

        I agree to some extent, however it does bring it to the attention of a
wider audience and force the maintainers to patch the problem rather
than allow the exploit to continue to circulate amongst quieter crowds,
in which case it may never be patched.


On Tue, 2004-02-24 at 18:44, -={|TooManyMirrors|}=- wrote:
I am a little confused as to what is "full-disclosure" about a binary
only exploit?
In my humble opinion full-disclosure is inteded to share knoladge not
just support easy exploitation.
giving easy access to a 'spoit discloses nothing and helps no one but
script kiddies

Toomanymirrors

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: