We’ve all seen the standard disclosure timeline for a vulnerability. Date discovered, date reported to vendor, date patched, date disclosed. Once in a while, they are a bit more amusing.
McAfee notified 2006/02/17, denied responsability for the product and referred to Apple.
Apple notified 2006/02/17, denied responsability for the issue and referred to McAfee.
Published 2006/02/28 on Bugtraq.