[12415] in bugtraq

home help back first fref pref prev next nref lref last post

Re: Unqualified Postings

daemon@ATHENA.MIT.EDU (Elias Levy)
Wed Nov 3 14:25:09 1999

Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Message-Id:  <19991103111612.D5050@securityfocus.com>
Date:         Wed, 3 Nov 1999 11:16:12 -0800
Reply-To: aleph1@SECURITYFOCUS.COM
From: Elias Levy <aleph1@SECURITYFOCUS.COM>
X-To:         bugtraq@securityfocus.com
To: BUGTRAQ@SECURITYFOCUS.COM

I am killing this thread. That being said the reason I approved the
message in the first place is to respond to it publicly as other people
may be asking themselves the same question.

As other have already pointed out these free or shareware programs
can actually surpass many commercial programs in number of installations.
How many people are using WinGate? More than those using MS Proxy.
Who many people are using one of the free SMTP/POP/IMAP servers? More than
those using MS Exchange.

Please note that this is not limited to Windows programs. Go visit
freshmeat.net and download some linux/open source programs and see
how many you can break. These programs are in use every day by many people.

A vulnerability in one of these programs is a just a important as a
vulnerability in a MS product or Solaris. Maybe the people using them should
not have as high an expectation of quality/security. Nonetheless they
programs are deployed and people are vulnerable. So yes, posts pointing
out vulnerabilities in such programs are welcomed on the list.

--
Elias Levy
Security Focus
http://www.securityfocus.com/

home help back first fref pref prev next nref lref last post