3 ms·
The vendor indicates "fixed" by posting the decrypted exploit data against their entry in Zed's database. If the bug was benign in the first place, they can po
by chrismsnz 16y ago
The vendor indicates "fixed" by posting the decrypted exploit data against their entry in Zed's database.
If the bug was benign in the first place, they can post the decrypted exploit without worrying about it or doing anything.
- zwp 16y agoEven when a bug has been fixed in trunk a vendor may not wish to reveal the details of an exploit (either publicly or "just to zed"). A sensitive researcher may not wish their details of their techniques or findings to be revealed to a wider audience. For context only (I don't want to do the responsible disclosure debate again...) please consider eg recent bugtraq SCADA announcent or Sockstress.