[pgpool-hackers: 3184] Re: FW: Responsible disclosure

[Fotios Rogkotis]

Hi Tatsuo,

Thanks for your swift response - I just sent you an email with the details. Please make sure that you have received it.

Best Regards

Fotis





Fotios Rogkotis | Security Researcher
Tel: +971 2 417 1417 | Mob: +971 58 900 1314
Fotios.Rogkotis at darkmatter.ae

The information transmitted, including attachments, is intended only for the person(s) or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and destroy any copies of this information.

On 12/9/18, 2:43 PM, "Tatsuo Ishii" <ishii at sraoss.co.jp> wrote:

    Hi,

    My name is Tatsuo Ishii, one of the core committers of the Pgpool-II
    project. Please send me the security issue you found in a private
    email.

    Best regards,
    --
    Tatsuo Ishii
    SRA OSS, Inc. Japan
    English: http://www.sraoss.co.jp/index_en.php
    Japanese:http://www.sraoss.co.jp

    > I think I hit the wrong email address on my last email so I am forwarding it here. Long story short, we would like to report a critical vulnerability that we have discovered and we are looking to inform the necessary stakeholders. If there is a point of contact for security issues please feel free to contact me directly. If this fails we will pass all the relevant information to the cve lists.
    >
    > Thanks
    >
    > Kind Regards
    >
    > Fotis
    >
    >
    >
    >
    > Fotios Rogkotis
    >         Security Researcher
    >
    > [cid:imageec96f8.PNG at 0f6b6588.4e8e44b3]<http://www.darkmatter.ae>
    >
    > Level 15, Aldar HQ
    > Abu Dhabi, United Arab Emirates
    > T  +971 2 417 1417<tel:+971%202%20417%201417>
    > M +971 58 900 1314<tel:+971%2058%20900%201314>
    > E  Fotios.Rogkotis at darkmatter.ae<mailto:Fotios.Rogkotis at darkmatter.ae>
    >
    > darkmatter.ae<http://darkmatter.ae>
    >
    > [Linkedin]<https://www.linkedin.com/company/dark-matter-llc> [Twitter] <https://twitter.com/GuardedbyGenius>
    >
    > [Year of Zayed] [cid:image7ac40c.JPG at 6eef6a7d.4db475cb] <http://>
    >
    > [HITB]<https://conference.hitb.org/hitbsecconf2018dxb/>
    >
    >
    >
    > The information in this email is intended only for the person(s) or entity to whom it is addressed and may contain confidential or privileged information. If you receive this email by error, please notify us immediately, delete the original message and do not disclose the contents to any other person, use or store or copy the information in any medium and for whatever purpose. Any unauthorized use is strictly prohibited.
    >
    > From: Fotios Rogkotis <fotios.rogkotis at darkmatter.ae>
    > Date: Sunday, December 9, 2018 at 9:56 AM
    > To: <pgpool-hackers-bounces at pgpool.net>
    > Subject: Responsible disclosure
    >
    > Hi there,
    >
    > We have tried to reach out few times back regarding a vulnerability that we have discovered. Could someone guide me who to contact?
    >
    > Thanks
    >
    > Fotis