|
The following form has been developed to ease gathering
vulnerability information. If you want to report a
vulnerability, please complete - as much as possible -
the following form, and send it to :
team@rsirt.com
FrSIRT Vulnerability Reporting Form version 1.0 <team@frsirt.com>
### Contact ###
1. Contact Name :
..................................................................................................
2. Organisation name :
..................................................................................................
3. Sector type :
..................................................................................................
4. Email address :
..................................................................................................
5. Mail address :
..................................................................................................
6. City :
..................................................................................................
7. Country :
..................................................................................................
8. Telephone number :
..................................................................................................
9. Other :
..................................................................................................
### Vendor
Notification ###
10. Have you reported this to the vendor? [yes/no]
....................................................
11. If so, please let us know whom you've contacted:
Date of your report : ...........................
Vendor contact name : ...........................
Vendor contact phone : ...........................
Vendor contact e-mail : ...........................
Vendor reference number : ...........................
###
Technical details of the vulnerability ###
12. What is the impact of this vulnerability ? (local
root, DoS...)
..................................................................................................
13. How would you envision it being used in an attack
scenario:
..................................................................................................
14. Is the vulnerability currently being exploited ? [yes/no]
..................................................................................................
15. If there is an exploitation code available, please
include it here.
..................................................................................................
..................................................................................................
..................................................................................................
16. What systems, versions and/or configurations are
vulnerable?
..................................................................................................
17. Are you aware of any workarounds and/or fixes for
this vulnerability?
..................................................................................................
18. Other relevant information :
..................................................................................................
..................................................................................................
|