Full Disclosure mailing list archives
RE: Nokia IPSO
From: "Landon Lewis" <landon.lewis () esoss com>
Date: Wed, 26 Nov 2003 17:19:07 -0500
Actually it's IPSO 3.7 build 31 -----Original Message----- From: full-disclosure-admin () lists netsys com [mailto:full-disclosure-admin () lists netsys com] On Behalf Of Seamus Hartmann Sent: Wednesday, November 26, 2003 1:58 PM To: 'William Brady'; 'Sandro Littke' Cc: 'Frederic Charpentier'; 'full-disclosure () lists netsys com' Subject: RE: [Full-disclosure] Nokia IPSO Hey, Nokia IPSO was based on FreeBSD 2.2.6. The current version of IPSO is 3.7 build 29. You can run GNU utilities on IPSO, most are now included in 3.7, but here's the page for the GNUkia project. http://www.applied-knowledge.net/people/cmarnold/projects/gnukia/ Also, there's a wealth of information that does not require a username/password on PhoneBoy's Nokia web page. http://www.phoneboy.com/index.php?page=6 Finally, there's a Nokia Security Solutions Handbook, the only one that I'm currently aware of (that doesn't rule out another) that you can get from amazon or other sites... http://www.amazon.com/exec/obidos/tg/detail/-/1931836701/qid=1069872725/ sr=1 -1/ref=sr_1_1/103-6230669-1326210?v=glance&s=books Hope this helped! Séamus Hartmann CCNA, CISSP Senior Network Engineer Fuji Film, eSystems (585) 340-4200 -----Original Message----- From: William Brady [mailto:security () saharu com] Sent: Wednesday, November 26, 2003 7:46 AM To: Sandro Littke Cc: Frederic Charpentier; full-disclosure () lists netsys com Subject: Re: [Full-disclosure] Nokia IPSO Greetings, You in fact can talk about the security of Nokia appliances. They are running a *nix based kernel and Check Point firewall. Recently a cross-site scripting or script injection vulnerability was posted to BugTraq and subsequently to SecuriTeam. FishNet Security was cited for the discovery : http://www.fishnetsecurity.com/CSIRT/disclosure/Nokia/Nokia.Voyager.Thre at.D etai ls.pdf @Stake also released a vulnerability in the Nokia Appliances back in June. http://www.atstake.com/research/advisories/2003/a060903-1.txt It seems as though the vulnerabilities are far and few between, currently. Bear in mind that posts that don't explicitly say Nokia could still be relevant due to the underlying operating system and other software. I actually forget if the OS is a rip of linux or bsd, but either way there would still be "other issues". Also, if you are talking about jsut security practices, there are a handful of lists off SecurityFocus you could subscribe to. Flames off-list, please. -William Quoting Sandro Littke <sl () estec net>:
On Wed, 2003-11-26 at 10:35, Frederic Charpentier wrote:hi, does anyone know a mailing list (or web site) about Nokia IPSO security ? Fred _______________________________________________ Full-Disclosure - We believe in it.^^^^^^^^^^^^^^^^ Hi, you cant talk about security of a thing that is a black box actually :-( Sandro. -- Sandro Littke <sl () estec net> _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
-------------------------------- Saharu Communications, Inc. Network Security Business Unit http://www.saharu.com -------------------------------- _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- RE: Nokia IPSO Rapaille Max (Nov 26)
- <Possible follow-ups>
- RE: Nokia IPSO Patrick Doyle (Nov 26)
- RE: Nokia IPSO Keifer, Trey (Nov 26)
- RE: Nokia IPSO Seamus Hartmann (Nov 26)
- RE: Nokia IPSO Landon Lewis (Nov 26)
- Re: Nokia IPSO arlen (Nov 27)