[<prev] [next>] [day] [month] [year] [list]
Message-ID: <928574116BD3784BBA6E7B0F017BA88A02FFB53E@SRVXCH10.LANPRD.NBB>
From: Max.Rapaille at nbb.be (Rapaille Max)
Subject: Nokia IPSO
Hi,
I think you can find more references on Phoneboy's web site.
Don't remember each list's name, but try
www.phoneboy.com and search for mailing lists.
HTH
Regards,
Max
> -----Original Message-----
> From: William Brady [mailto:security@...aru.com]
> Sent: mercredi 26 novembre 2003 13:46
> To: Sandro Littke
> Cc: Frederic Charpentier; full-disclosure@...ts.netsys.com
> Subject: Re: [Full-Disclosure] Nokia IPSO
>
>
>
> Greetings,
>
> You in fact can talk about the security of Nokia
> appliances. They are running
> a *nix based kernel and Check Point firewall.
>
> Recently a cross-site scripting or script injection
> vulnerability was posted
> to BugTraq and subsequently to SecuriTeam. FishNet Security
> was cited for the
> discovery :
> http://www.fishnetsecurity.com/CSIRT/disclosure/Nokia/Nokia.Vo
> yager.Threat.Detai
> ls.pdf
>
> @Stake also released a vulnerability in the Nokia Appliances
> back in June.
> http://www.atstake.com/research/advisories/2003/a060903-1.txt
>
> It seems as though the vulnerabilities are far and few
> between, currently.
> Bear in mind that posts that don't explicitly say Nokia could
> still be relevant
> due to the underlying operating system and other software. I
> actually forget if
> the OS is a rip of linux or bsd, but either way there would
> still be "other
> issues".
>
> Also, if you are talking about jsut security practices,
> there are a handful of
> lists off SecurityFocus you could subscribe to.
>
>
> Flames off-list, please.
>
> -William
>
>
>
> Quoting Sandro Littke <sl@...ec.net>:
>
> > On Wed, 2003-11-26 at 10:35, Frederic Charpentier wrote:
> > > hi, does anyone know a mailing list (or web site) about
> Nokia IPSO
> > > security ?
> > >
> > > Fred
> > >
> > > _______________________________________________
> > > Full-Disclosure - We believe in it.
> > ^^^^^^^^^^^^^^^^
> >
> > Hi, you cant talk about security of a thing that is a black
> box actually
> > :-(
> >
> > Sandro.
> > --
> > Sandro Littke <sl@...ec.net>
> >
> > _______________________________________________
> > Full-Disclosure - We believe in it.
> > Charter: http://lists.netsys.com/full-disclosure-charter.html
> >
>
> --------------------------------
> Saharu Communications, Inc.
> Network Security Business Unit
> http://www.saharu.com
> --------------------------------
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
>
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: NBB_Disclaimer.txt
Url: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20031126/389b5b91/NBB_Disclaimer.txt
Powered by blists - more mailing lists