full-disclosure - Nokia IPSO

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <000701c3b46b$4ec6af10$060112ac@devnull>
From: landon.lewis at esoss.com (Landon Lewis)
Subject: Nokia IPSO

Actually it's IPSO 3.7 build 31

-----Original Message-----
From: full-disclosure-admin@...ts.netsys.com
[mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of Seamus
Hartmann
Sent: Wednesday, November 26, 2003 1:58 PM
To: 'William Brady'; 'Sandro Littke'
Cc: 'Frederic Charpentier'; 'full-disclosure@...ts.netsys.com'
Subject: RE: [Full-Disclosure] Nokia IPSO

Hey,

Nokia IPSO was based on FreeBSD 2.2.6. The current version of IPSO is
3.7
build 29.

You can run GNU utilities on IPSO, most are now included in 3.7, but
here's
the page for the GNUkia project.

http://www.applied-knowledge.net/people/cmarnold/projects/gnukia/

Also, there's a wealth of information that does not require a
username/password on PhoneBoy's Nokia web page.

http://www.phoneboy.com/index.php?page=6

Finally, there's a Nokia Security Solutions Handbook, the only one that
I'm
currently aware of (that doesn't rule out another) that you can get from
amazon or other sites...

http://www.amazon.com/exec/obidos/tg/detail/-/1931836701/qid=1069872725/
sr=1
-1/ref=sr_1_1/103-6230669-1326210?v=glance&s=books

Hope this helped!

S?amus Hartmann
CCNA, CISSP
Senior Network Engineer
Fuji Film, eSystems
(585) 340-4200

-----Original Message-----
From: William Brady [mailto:security@...aru.com] 
Sent: Wednesday, November 26, 2003 7:46 AM
To: Sandro Littke
Cc: Frederic Charpentier; full-disclosure@...ts.netsys.com
Subject: Re: [Full-Disclosure] Nokia IPSO

 Greetings,

  You in fact can talk about the security of Nokia appliances. They are
running 
a *nix based kernel and Check Point firewall.

 Recently a cross-site scripting or script injection vulnerability was
posted 
to BugTraq and subsequently to SecuriTeam. FishNet Security was cited
for
the 
discovery : 
http://www.fishnetsecurity.com/CSIRT/disclosure/Nokia/Nokia.Voyager.Thre
at.D
etai
ls.pdf

 @Stake also released a vulnerability in the Nokia Appliances back in
June. 
http://www.atstake.com/research/advisories/2003/a060903-1.txt

  It seems as though the vulnerabilities are far and few between,
currently.

Bear in mind that posts that don't explicitly say Nokia could still be
relevant 
due to the underlying operating system and other software. I actually
forget
if 
the OS is a rip of linux or bsd, but either way there would still be
"other 
issues".

 Also, if you are talking about jsut security practices, there are a
handful
of 
lists off SecurityFocus you could subscribe to.

 Flames off-list, please.

 -William

Quoting Sandro Littke <sl@...ec.net>:

> On Wed, 2003-11-26 at 10:35, Frederic Charpentier wrote:
> >  hi, does anyone know a mailing list (or web site) about Nokia IPSO 
> > security ?
> > 
> > Fred
> > 
> > _______________________________________________
> > Full-Disclosure - We believe in it.
>  ^^^^^^^^^^^^^^^^
> 
> Hi, you cant talk about security of a thing that is a black box 
> actually :-(
> 
> Sandro.
> --
> Sandro Littke <sl@...ec.net>
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
> 

--------------------------------
  Saharu Communications, Inc.
 Network Security Business Unit
    http://www.saharu.com
--------------------------------

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html