RE: Nokia IPSO

["Keifer, Trey" <Trey.Keifer () fishnetsecurity com>]

When we released our IPSO vulnerability we learned that typically security issues with this platform
are handled through the Nokia customer service channels. Responsible disclosure guidelines almost
always dictate that the vendor is given the first notification so these are usually your best bet for
information. We felt that the Bugtraq and Full-Disclosure lists were the best for making the security
research community aware of the issues and helping to spread the notification. 

In addition to our advisory though we also wrote a quick and simple guide to securing the voyager/IPSO
interface...
http://www.fishnetsecurity.com/CSIRT/disclosure/Nokia/Securing.Nokia.Network.Voyager.pdf

Hope that helps...

Trey Keifer
Security Engineer - Level II
Fishnet Security

Office: 816.421.6611
Cell: 816.710.6830
Toll Free: 888.732.9406
Fax: 816.421.3371

http://www.fishnetsecurity.com 

-----Original Message-----
From: Frederic Charpentier [mailto:fcharpentier () xmcopartners com]
Sent: Wednesday, November 26, 2003 4:36 AM
To: full-disclosure () lists netsys com
Subject: [Full-disclosure] Nokia IPSO


 hi, does anyone know a mailing list (or web site) about Nokia IPSO
security ?

Fred

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html