besides that they have unencrypted passwords in some files, I would be interested in knowing what else they might have. try those. If you call up tech support they will call you back usually in 48hours. http://esupport.ca.com/public/ca_common_docs/contact.asp#problem http://esupport.ca.com/public/ca_common_docs/pfsopt.asp Nick -----Original Message----- From: Nicolas Gregoire [mailto:ngregoire@exaprobe.com] Sent: Friday, April 05, 2002 8:17 AM To: bugtraq@securityfocus.com Subject: CA security contact Hi, I'm looking for a security contact at Computer Associates. Found a BIG bug ... There's nothing on their websites. I wrote to security@ca.com and received an "Out Of Office Autoreply" from Philip.Froehlich@ca.com Nicolas Gregoire Exaprobe