Full Disclosure mailing list archives

Re: Re: Anyone know IBM's security address?


From: jmpascual <pask () open3s com>
Date: Sat, 7 Aug 2004 00:02:39 +0200 (CEST)


what kind of products? informix? db2?

BEst regards



On Fri, 6 Aug 2004, Jedi/Sector One wrote:

On Fri, Aug 06, 2004 at 05:11:19PM -0400, Michael Scheidell wrote:
Have a vulnerability in an IBM product.
sent alert to security () ibm com secure () ibm com and cert () ibm com, all three bounced.
Can anyone tell me the official address or procedure to notify IBM?

  For AIX-releated flaws, the contact is security-alert () austin ibm com
  
  For other products... good luck. I also have a vulnerability in an IBM
product but I wasn't able to get in touch with anyone.

  Online forms told me to call a number that is unreachable outside USA.
  
  The AIX security officer told me he would find the right contact but I
never got anything else since.



-- 



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: