OpenGear Subjected To XSS Bug

[ZeroKnock]

The Brilliant minds game.

The Main Advisory Link

http://users.cjb.net/zeroknock/advisoryopengear.txt


the Exploited Link :

http://users.cjb.net/zeroknock/exploit.html



Mail The Vendor . Not Patched Yet.

Waiting For Your Response.

[Soda_Popinsky]

Contact the vendor yourself. Releasing advisories for private software is irresponsible, and your explanation:

[+] Poorly Coded Modules.
[+] No Patch For Ignorance.

...is pretty revealing about your own maturity.

OpenGear
Bob Waldie
PO Box 5013
Brisbane, QLD 4101
AU
01161429906740
bob@waldie.com.au

Nobody can fix this other than opengear themselves, the ball is in your court and you're releasing this in the wrong direction.

[ZeroKnock]

For your knowledge this in terms when vendor show ignorance it has to be public.

I have mailed them.

Its not my prbb if they are not acting on it.

[Soda_Popinsky]

Its not my prbb if they are not acting on it.

Alliance Of Security Analysis Professionals.

That's not very professional. If it's not your problem then why are you amplifying their problem?

[warl0ck7]

Very poor and irresponsible behaviour zeroknock, you rightly said
."there is'nt a parch for ignorance" so, stop being ignorant
(god damn what did i tell you to do!!!).

[Sm0kinP0t]

so, stop being ignorant

OpenGear Subjected To XSS Bug posted 04-29-2006 01:36 PM
Viewing post by banned user well...someone has already stoped his ignorance from hanging 'round AO