http://www.linux.com/feature/123171 explains the philosophy and reasoning of Palamida, which found those vulnerabilities. I found the article to be FUD-free.
http://www.palamida.com/node/513 lists the topmost 5 overlooked vulnerabilities for 2007 according to them. Of course, in their blog, they do not miss an opportunity to promote their business (audit of corporate codebase to find uses of Free Software and overlooked vulnerabilities). DISCLAIMER: I am neither affiliated nor customer (satisfied or otherwise). I only read some security related Web news items, and thought it'll be good idea to bring those news items to general attention. --- Omer -- MS-Windows is the Pal-Kal of the PC world. My own blog is at http://www.zak.co.il/tddpirate/ My opinions, as expressed in this E-mail message, are mine alone. They do not represent the official policy of any organization with which I may be affiliated in any way. WARNING TO SPAMMERS: at http://www.zak.co.il/spamwarning.html ================================================================= To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]