Full Disclosure mailing list archives
Re: SiteMinder Multiple Vulnerabilities
From: "Williams, James K" <James.Williams () ca com>
Date: Tue, 19 Jul 2005 12:41:21 -0400
List: full-disclosure Subject: [Full-disclosure] SiteMinder Multiple Vulnerabilities From: c0ntexb () gmail ! com Date: 2005-07-08 14:08:53 Message-ID: df8ba96d050708070869551019 () mail ! gmail ! com $ An open security advisory #10 - Siteminder v5.5 Vulnerabilities
[...]
I have contacted Netegrity via ca.com multiple times but received no response, as such, users should use a filtering technology like modsecurity to detect the above descibed attacks until a fix has been released.
Note that vulnerabilities can be reported to CA by a) sending email to vuln () ca com, or b) submitting via a web form at http://www3.ca.com/securityadvisor/vulninfo/submit.aspx . The form can be found by clicking on the "Submit a Vulnerability" link at http://www3.ca.com/securityadvisor/ . This information is documented in the "Vendor Dictionary" at OSVDB. Regards, kw Ken Williams ; Vulnerability Research Computer Associates ; 0xE2941985 A9F9 44A6 B421 FF7D 4000 E6A9 7925 91DF E294 1985 _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- SiteMinder Multiple Vulnerabilities c0ntex (Jul 08)
- <Possible follow-ups>
- Re: SiteMinder Multiple Vulnerabilities Williams, James K (Jul 19)