apache: off-by-one buffer overflow

apache: off-by-one buffer overflow

Posted Aug 3, 2006 9:34 UTC (Thu) by mjcox@redhat.com (guest, #31775)
Parent article: apache: off-by-one buffer overflow

Timeline for those interested from my blog

20060721-23:29 Mark Dowd forwards details of issue to security@apache.org
20060722-07:42 Initial response from Apache security team
20060722-08:14 Investigation, testing, and patches created
20060724-19:04 Negotiated release date with reporter
20060725-10:00 Notified NISCC and CERT to give vendors heads up
20060727-17:00 Fixes committed publically
20060727-23:30 Updates released to Apache site
20060828       Public announcement from Apache, McAfee, CERT, NISCC

---

(Log in to post comments)