Vendor Contacts

Aleph One (aleph1@DFW.NET)
Wed, 01 Apr 1998 12:25:30 -0600

Messages sorted by: [ date ][ thread ][ subject ][ author ]
Next message: Ronny Cook: "BSD coredumps follow symlinks"
Previous message: Casper Dik: "Re: wtmpx utility for solaris"

After my little rant about informing vendors when you find a vulnerability
someone suggested that I post a list of contacts. A little late but here
it is.

Apache

security@apache.org
http://www.apache.org/

BSDI

problems@bsdi.com
http://www.BSDI.COM/support/patches/

Digital

rich.boren@cxo.mts.dec.com

FreeBSD

security-officer@freebsd.org
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/public_key.asc
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/

security-alert@hp.com
PGP key is avaiable via the public key servers, or by sending a message
with a subject to 'get key' to security-alert@hp.com
http://us-support.external.hp.com/

IBM

security-alert@austin.ibm.com
http://www.ers.ibm.com/team-info/pgpkey.html
http://www.ers.ibm.com/tech-info/advisories/index.html

Microsoft

secure@microsoft.com
http://www.microsoft.com/security/pgpkeys.txt
http://www.microsoft.com/security/

NetBSD

security-officer@netbsd.org
ftp://ftp.betbsd.org/pub/NetBSD/misc/security/PGP/security-officer@netbsd.org.asc
ftp://ftp.betbsd.org/pub/NetBSD/misc/security/

OpenBSD

deraadt@openbsd.org
http://www.openbsd.org/advisories/pgpkey
http://www.openbsd.org/advisories/

RedHat

bugs@redhat.com
http://www.redhat.com/errata/

SCO

security-alert@sco.com
http://www.sco.com/security/