>> (p.1)
    Author Topic: US Computer Emergency Readiness Team nist.gov publish 2year old bitcoin vulns  (Read 1254 times)
    julz (OP)
    Legendary
    *
    Offline Offline

    Activity: 1092
    Merit: 1001



    View Profile
    August 14, 2012, 12:03:26 AM
    Last edit: August 14, 2012, 03:32:44 AM by julz
     #1

    http://www.us-cert.gov/cas/bulletins/SB12-226.html

    http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-5139

    which references the discussion thread: https://bt.irlbtc.com/view/822.0


    Why now?  Is it standard practice to release such old warnings?

    With wording like:
    "allows remote attackers to bypass intended economic restrictions and create many bitcoins via a crafted Bitcoin transaction."
    and
    "Impact Type:Allows unauthorized disclosure of information; Allows unauthorized modification; Allows disruption of service"

    It's potentially damaging If people don't notice how old it is I would have thought.

    @electricwings   BM-GtyD5exuDJ2kvEbr41XchkC8x9hPxdFd
Page 1
Viewing Page: 1