The official security contact address for Lyris is now 'security@xxxxxxxxx'. Many thanks to the dozens of people that replied, a representative from Lyris contacted me within an hour of the Bugtraq email going out ;-) -HD On Tuesday 21 June 2005 13:17, H D Moore wrote: > I am trying to reach the security contact at Lyris (www.lyris.com). I > sent an email to every address listed on the web site and keep getting > blown off by the operator when I call[1]. The OSVDB Vendor Dictionary > has no contact information listed for Lyris. There are a number of > serious, remotely-exploitable issues in the ListManager product...