NCI Agency employee exposes software vulnerabilities

Communication

16/08/2012

Emmanuel Bouillon (Capability Development team) is still actively pursuing his hobby of finding and reporting vulnerabilities in software and protocols. After having been credited in the first Common Vulnerabilities and Exposures (CVE) bulletin of 2011 (CVE-2011-0001), he outdid himself again and identified flaws in the Massachusetts Institute of Technology (MIT) Kerberos Key Distribution Centre Heap that could allow remote users to execute malicious code.

After a month MIT confirmed these vulnerabilities, fixed them and disclosed the associated security bulletin to the public.

The MIT officially thanked Emmanuel Bouillon for discovering and reporting these vulnerabilities. Similar acknowledgement and thanks were expressed by Red Hat, Debian, Ubuntu and other major providers of security bulletins.

In response Emmanuel states: "I am very proud to receive this recognition, it is just an illustration of the good work that people are providing in the various segments of the NCI Agency."

NCI Agency employee exposes software vulnerabilities

Related articles

Latest news