Home page logo

bugtraq logo Bugtraq mailing list archives

Re: SiteMinder Multiple Vulnerabilities
From: "Williams, James K" <James.Williams () ca com>
Date: Tue, 19 Jul 2005 12:39:22 -0400

List:       bugtraq
Subject:    SiteMinder Multiple Vulnerabilities
From:       c0ntexb () gmail ! com
Date:       2005-07-08 14:03:11
Message-ID: 20050708140311.20979.qmail () securityfocus ! com

$ An open security advisory #10 - Siteminder v5.5 Vulnerabilities


I have contacted Netegrity via ca.com multiple times but received 
no response, as such, users  should use a filtering technology 
like modsecurity to detect the above descibed attacks until a 
fix has been released.

Note that vulnerabilities can be reported to CA by a) sending email 
to vuln () ca com, or b) submitting via a web form at 
http://www3.ca.com/securityadvisor/vulninfo/submit.aspx .  The 
form can be found by clicking on the "Submit a Vulnerability" link
at http://www3.ca.com/securityadvisor/ .  This information is 
documented in the "Vendor Dictionary" at OSVDB.

Ken Williams ; Vulnerability Research 
Computer Associates ; 0xE2941985
A9F9 44A6 B421 FF7D 4000 E6A9 7925 91DF E294 1985

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]