Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos

Bugtraq: Re: SiteMinder Multiple Vulnerabilities

Re: SiteMinder Multiple Vulnerabilities

From: Williams, James K <James.Williams_at_ca.com>
Date: Tue, 19 Jul 2005 12:39:22 -0400

> List: bugtraq
> Subject: SiteMinder Multiple Vulnerabilities
> From: c0ntexb () gmail ! com
> Date: 2005-07-08 14:03:11
> Message-ID: 20050708140311.20979.qmail () securityfocus ! com
>
> $ An open security advisory #10 - Siteminder v5.5 Vulnerabilities

[...]

> I have contacted Netegrity via ca.com multiple times but received
> no response, as such, users should use a filtering technology
> like modsecurity to detect the above descibed attacks until a
> fix has been released.

Note that vulnerabilities can be reported to CA by a) sending email
to vuln_at_ca.com, or b) submitting via a web form at
http://www3.ca.com/securityadvisor/vulninfo/submit.aspx . The
form can be found by clicking on the "Submit a Vulnerability" link
at http://www3.ca.com/securityadvisor/ . This information is
documented in the "Vendor Dictionary" at OSVDB.

Regards,
kw
                                                           
Ken Williams ; Vulnerability Research
Computer Associates ; 0xE2941985
A9F9 44A6 B421 FF7D 4000 E6A9 7925 91DF E294 1985
Received on Jul 19 2005

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]