[40953] in bugtraq
Re: Network Appliance iSCSI Authentication Bypass
daemon@ATHENA.MIT.EDU (steve.shockley@shockley.net)
Sat Oct 29 20:15:19 2005
Message-ID: <20051028091853.5c18xgqog84kgsko@krunk.shockley.net>
Date: Fri, 28 Oct 2005 09:18:53 -0400
From: steve.shockley@shockley.net
To: Steve Shockley <steve.shockley@shockley.net>
Cc: advisories@matasano.com, bugtraq@securityfocus.com
In-Reply-To: <43618AF5.9000702@shockley.net>
MIME-Version: 1.0
Content-Type: text/plain;
charset=ISO-8859-1;
format="flowed"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Quoting Steve Shockley <steve.shockley@shockley.net>:
> That's it. NOT ONE WORD ABOUT A VULNERABILITY OR A FIX.
In NetApp's defense, they did send out an advisory to customers five
hours after
the initial notice of the availability of the fix. I understand only
customers
who have licensed the iSCSI component get a notification.