ISS X-Force Security Advisories on Checkpoint Firewall-1 and VPN-1

Valdis.Kletnieks at vt.edu Valdis.Kletnieks at vt.edu
Thu Feb 5 20:11:41 UTC 2004


On Thu, 05 Feb 2004 14:56:13 EST, "Steven M. Bellovin" said:

> Why is that bad?  I have no objection to giving vendors a reasonable 
> amount of time to fix problems before announcing the whole.  Or is your 
> point that two days hardly seems like enough time to develop -- and 
> *test* -- a fix?

Two days is plenty if it's a Homer Simpson-esque "D'Oh!" bug.  Probably
not if it's something that requires some regression testing.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20040205/447a4e0a/attachment.sig>


More information about the NANOG mailing list