evan_tech

Previous Entry Share Next Entry
12:50 pm, 16 Apr 09

security bugs

http://seclists.org/fulldisclosure/2009/Apr/0129.html:
VIII. DISCLOSURE TIMELINE
06/28/2006 - Initial Contact
06/29/2006 - PoC Requested
06/29/2006 - PoC Sent
10/05/2006 - Vendor Status Update
01/24/2007 - Vendor Status Update
02/12/2008 - Vendor Status Update
03/31/2009 - CVE Assigned
04/14/2009 - Coordinated Public Disclosure
That's a loooong time to sit on a bug.