Re: [Full-disclosure] Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability

[Nikhil Mittal <nikhil_uitrgpv@xxxxxxxxxxx>]

>>Here's my definition

>>Exploitable vulnerability = vulnerability
>>Non-exploitable "vulnerability" = mental masturbation

Nice definition. I would like to add one more line for my definition

Inability to recognize a straight forward vulnerability = mentally handicap



Nikhil Mittal



--- On Fri, 10/9/10, Michal Zalewski <lcamtuf@xxxxxxxxxxx> wrote:

From: Michal Zalewski <lcamtuf@xxxxxxxxxxx>
Subject: Re: [Full-disclosure] Nmap NOT VULNERABLE to Windows DLL Hijacking 
Vulnerability
To: "Nikhil Mittal" <nikhil_uitrgpv@xxxxxxxxxxx>
Cc: full-disclosure@xxxxxxxxxxxxxxxxx, "Fyodor" <fyodor@xxxxxxxxxxxx>
Date: Friday, 10 September, 2010, 4:23 AM

> Please, try to figure out the difference b/w exploitability and vulnerability.

Here's my definition

Exploitable vulnerability = vulnerability
Non-exploitable "vulnerability" = mental masturbation

HTH,
/mz


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/