Addressing security vulnerabilities

[Rudolph Pereira]

Hi all,

I submitted http://tracker.nagios.org/view.php?id=400 a while ago and
have had little to no response on it, even though it is a serious
issue.

I am looking for suggestions on how to deal with this; given the
seriousness of the issue and how many users it affects I believe a
security vulnerability notice should go out at the very least. Should
I be working with ocert or some other intermediary on this?

Cheers,
Rudolph.

------------------------------------------------------------------------------
Monitor your physical, virtual and cloud infrastructure from a single
web console. Get in-depth insight into apps, servers, databases, vmware,
SAP, cloud infrastructure, etc. Download 30-day Free Trial.
Pricing starts from $795 for 25 servers or applications!
http://p.sf.net/sfu/zoho_dev2dev_nov