Cutting to the Chase
Currently, I possess over one dozen additional Asterisk Resource Exhaustion 0days.
Senior staff at Digium was initially notified on 08/17/08 of these discoveries and peer reviewed additional Asterisk Resource Exhaustion issues.
Two days after this, the identical disclosure was sent to additional engineering staff members at Digium. Promises were made that these people would look into it and fix it.
It has been almost an entire month and there has not been a single shred of productive communication on their behalf.
- Digium has developed increased semblance toward the issue.
- The 30 way window between notification and disclosure is ending 7 days before Astricon.
Stay tuned, more fun facts to come.