Posted by Fernando Gont on Jun 02
Hi, Mark,
I mentioned this issue to at least one guy @ PSIRT.
Nevertheless, it has to tell what it takes for a vendor to be aware. I
have had some experience in the past in which I notified an issue to
vendors (more than one issue, more than one vendor), and they showed no
concerns. One year later they ended up publishing advisories in response
to the same issues, but reported much later than when we had reported them.
We had worked on this…