RE: Nokia IPSO

["Rapaille Max" <Max.Rapaille () nbb be>]

Hi,

I think you can find more references on Phoneboy's web site.
Don't remember each list's name, but try
www.phoneboy.com  and search for mailing lists.

HTH
Regards,

Max

> -----Original Message-----
> From: William Brady [mailto:security () saharu com] 
> Sent: mercredi 26 novembre 2003 13:46
> To: Sandro Littke
> Cc: Frederic Charpentier; full-disclosure () lists netsys com
> Subject: Re: [Full-disclosure] Nokia IPSO
>
>
>
>  Greetings,
>
>   You in fact can talk about the security of Nokia 
> appliances. They are running 
> a *nix based kernel and Check Point firewall.
>
>  Recently a cross-site scripting or script injection 
> vulnerability was posted 
> to BugTraq and subsequently to SecuriTeam. FishNet Security 
> was cited for the 
> discovery : 
> http://www.fishnetsecurity.com/CSIRT/disclosure/Nokia/Nokia.Vo
> yager.Threat.Detai
> ls.pdf
>
>  @Stake also released a vulnerability in the Nokia Appliances 
> back in June. 
> http://www.atstake.com/research/advisories/2003/a060903-1.txt
>
>   It seems as though the vulnerabilities are far and few 
> between, currently. 
> Bear in mind that posts that don't explicitly say Nokia could 
> still be relevant 
> due to the underlying operating system and other software. I 
> actually forget if 
> the OS is a rip of linux or bsd, but either way there would 
> still be "other 
> issues".
>
>  Also, if you are talking about jsut security practices, 
> there are a handful of 
> lists off SecurityFocus you could subscribe to.
>
>
>  Flames off-list, please.
>
>  -William
>
>
>
> Quoting Sandro Littke <sl () estec net>:
>
> > On Wed, 2003-11-26 at 10:35, Frederic Charpentier wrote:
> > >  hi, does anyone know a mailing list (or web site) about 
> Nokia IPSO
> > > security ?
> > >
> > > Fred
> > >
> > > _______________________________________________
> > > Full-Disclosure - We believe in it.
> >  ^^^^^^^^^^^^^^^^
> >
> > Hi, you cant talk about security of a thing that is a black 
> box actually
> > :-(
> >
> > Sandro.
> > -- 
> > Sandro Littke <sl () estec net>
> >
> > _______________________________________________
> > Full-Disclosure - We believe in it.
> > Charter: http://lists.netsys.com/full-disclosure-charter.html
>
> --------------------------------
>   Saharu Communications, Inc.
>  Network Security Business Unit
>     http://www.saharu.com
> --------------------------------
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html

Attachment: NBB_Disclaimer.txt
Description: