thoughts on Windows UPnP Vulnerability

[Gary Stoneburner <stoneburner@nist.gov>]

re:
http://www.info-sec.com/crypto/02/crypto_011502a_j.shtml

"This vulnerability is a buffer overflow, the easy-to-use
low-hanging-fruit automatic-tools-to-fix kind of security vulnerability.
It's not new or subtle; buffer overflows have been causing serious
security problems for decades. ...  This is a software quality
problem, pure and simple. And the real solution is better software
design, implementation, and quality procedures, not more patches and
alerts and press releases."

Cheers,
Gary

**************************************************************************
* Opinions expressed are not intended to reflect an official position
**************************************************************************
* Gary Stoneburner         
*(been mobilized - Major, US Army Land Information Warfare Activity (LIWA))
* NIST contact points are still valid:
*   Phone: 301-975-5394, FAX: 301-948-0279, Email: Stoneburner@nist.gov
**************************************************************************