lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  PHC 
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
From: shartmann at (Seamus Hartmann)
Subject: Nokia IPSO


Nokia IPSO was based on FreeBSD 2.2.6. The current version of IPSO is 3.7
build 29.

You can run GNU utilities on IPSO, most are now included in 3.7, but here's
the page for the GNUkia project.

Also, there's a wealth of information that does not require a
username/password on PhoneBoy's Nokia web page.

Finally, there's a Nokia Security Solutions Handbook, the only one that I'm
currently aware of (that doesn't rule out another) that you can get from
amazon or other sites...

Hope this helped!

S?amus Hartmann
Senior Network Engineer
Fuji Film, eSystems
(585) 340-4200

-----Original Message-----
From: William Brady [] 
Sent: Wednesday, November 26, 2003 7:46 AM
To: Sandro Littke
Cc: Frederic Charpentier;
Subject: Re: [Full-Disclosure] Nokia IPSO


  You in fact can talk about the security of Nokia appliances. They are
a *nix based kernel and Check Point firewall.

 Recently a cross-site scripting or script injection vulnerability was
to BugTraq and subsequently to SecuriTeam. FishNet Security was cited for
discovery :

 @Stake also released a vulnerability in the Nokia Appliances back in June.

  It seems as though the vulnerabilities are far and few between, currently.

Bear in mind that posts that don't explicitly say Nokia could still be
due to the underlying operating system and other software. I actually forget
the OS is a rip of linux or bsd, but either way there would still be "other 

 Also, if you are talking about jsut security practices, there are a handful
lists off SecurityFocus you could subscribe to.

 Flames off-list, please.


Quoting Sandro Littke <>:

> On Wed, 2003-11-26 at 10:35, Frederic Charpentier wrote:
> >  hi, does anyone know a mailing list (or web site) about Nokia IPSO 
> > security ?
> > 
> > Fred
> > 
> > _______________________________________________
> > Full-Disclosure - We believe in it.
>  ^^^^^^^^^^^^^^^^
> Hi, you cant talk about security of a thing that is a black box 
> actually :-(
> Sandro.
> --
> Sandro Littke <>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter:

  Saharu Communications, Inc.
 Network Security Business Unit

Full-Disclosure - We believe in it.

Powered by blists - more mailing lists