> List: bugtraq > Subject: SiteMinder Multiple Vulnerabilities > From: c0ntexb () gmail ! com > Date: 2005-07-08 14:03:11 > Message-ID: 20050708140311.20979.qmail () securityfocus ! com > > $ An open security advisory #10 - Siteminder v5.5 Vulnerabilities [...] > I have contacted Netegrity via ca.com multiple times but received > no response, as such, users should use a filtering technology > like modsecurity to detect the above descibed attacks until a > fix has been released. Note that vulnerabilities can be reported to CA by a) sending email to vuln@xxxxxx, or b) submitting via a web form at http://www3.ca.com/securityadvisor/vulninfo/submit.aspx . The form can be found by clicking on the "Submit a Vulnerability" link at http://www3.ca.com/securityadvisor/ . This information is documented in the "Vendor Dictionary" at OSVDB. Regards, kw Ken Williams ; Vulnerability Research Computer Associates ; 0xE2941985 A9F9 44A6 B421 FF7D 4000 E6A9 7925 91DF E294 1985