lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Message-ID: <D7DDF83751235046BFAC82E1244EB4C808176415@usilms23.ca.com>
Date: Tue Jul 19 17:41:32 2005
From: James.Williams at ca.com (Williams, James K)
Subject: Re: SiteMinder Multiple Vulnerabilities


> List:       full-disclosure
> Subject:    [Full-disclosure] SiteMinder Multiple Vulnerabilities
> From:       c0ntexb () gmail ! com
> Date:       2005-07-08 14:08:53
> Message-ID: df8ba96d050708070869551019 () mail ! gmail ! com
>
> $ An open security advisory #10 - Siteminder v5.5 Vulnerabilities

[...]

> I have contacted Netegrity via ca.com multiple times but received 
> no response, as such, users  should use a filtering technology 
> like modsecurity to detect the above descibed attacks until a 
> fix has been released.

Note that vulnerabilities can be reported to CA by a) sending email 
to vuln@...com, or b) submitting via a web form at 
http://www3.ca.com/securityadvisor/vulninfo/submit.aspx .  The 
form can be found by clicking on the "Submit a Vulnerability" link
at http://www3.ca.com/securityadvisor/ .  This information is 
documented in the "Vendor Dictionary" at OSVDB.

Regards,
kw
                                                           
Ken Williams ; Vulnerability Research 
Computer Associates ; 0xE2941985
A9F9 44A6 B421 FF7D 4000 E6A9 7925 91DF E294 1985

Powered by blists - more mailing lists