full-disclosure - Nokia IPSO

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <8654C851B1DAFA4FA18A9F150145F92588819F@fnex01.fishnetsecurity.com>
From: Trey.Keifer at fishnetsecurity.com (Keifer, Trey)
Subject: Nokia IPSO

When we released our IPSO vulnerability we learned that typically security issues with this platform
are handled through the Nokia customer service channels. Responsible disclosure guidelines almost
always dictate that the vendor is given the first notification so these are usually your best bet for
information. We felt that the Bugtraq and Full-Disclosure lists were the best for making the security
research community aware of the issues and helping to spread the notification. 

In addition to our advisory though we also wrote a quick and simple guide to securing the voyager/IPSO
interface...
http://www.fishnetsecurity.com/CSIRT/disclosure/Nokia/Securing.Nokia.Network.Voyager.pdf

Hope that helps...

Trey Keifer
Security Engineer - Level II
Fishnet Security

Office: 816.421.6611
Cell: 816.710.6830
Toll Free: 888.732.9406
Fax: 816.421.3371

http://www.fishnetsecurity.com 

-----Original Message-----
From: Frederic Charpentier [mailto:fcharpentier@...opartners.com]
Sent: Wednesday, November 26, 2003 4:36 AM
To: full-disclosure@...ts.netsys.com
Subject: [Full-Disclosure] Nokia IPSO

 hi, does anyone know a mailing list (or web site) about Nokia IPSO
security ?

Fred

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html