Re: Apache Killer

[Valdis.Kletnieks () vt edu]

On Thu, 25 Aug 2011 21:35:04 +0300, Georgi Guninski said:
> On Wed, Aug 24, 2011 at 10:45:53AM +0100, Mark J Cox wrote:
> > Use CVE-2011-3192.
>
> why the fuck use this shit?

So that when two different people issue advisories about it, if they both say
CVE-2011-3192, we know it's the same issue.  Otherwise if you got some people
writing about Kingcope's hole with gzip and others writing about Zalewski's
hole with Range: it's hard to tell if they're really the same issue or not.

Attachment: _bin
Description:

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/