<<< Date Index >>>     <<< Thread Index >>>

SAP Security Contact



I do not like to bother this mailing list with such requests, but as you will see from below (SAP's response), I feel this is a last resort. I have also phoned SAP leaving a voice mail but with no success.

So if anyone can assist with a contact email address at SAP, ideally an individual, this would be greatly appreciated.

Thanks in advance for any help.

Cheers

Mark


--------------------------------------------------------------------------------
From: SAP [mailto:webmaster@xxxxxxx]
Sent: Thu 1/4/2007 3:16 PM
To: Mark Litchfield
Subject: Re: General Enquiry (KMM3303039I24953L0KM)




Mark

Thank you for your interest in SAP. You will need to send your request directly to our headquarters location in writing.

Here is the headquarters address.

SAP Americas
3999 West Chester Pike
Newtown Square,  Pa   19073


Original Message Follows: ------------------------
InfoRequest - General Enquiry

Your Message
I am contacting SAP about:
General inquiry
Dear Sir / Madam,

I am conducting vulnerabvility research into SAP and the various components that make up SAP. So far my research has found 8 security vulnerabilities, some of which allow an attcker to execute code remotely on the SAP server as SYSTEM without the need for authentication.

I am looking for if possible, a security contact within SAP that I may share my findings with so the necessary code fixes can be put in place to prevent these issues.

Any assistance you could offer would be greatly appreciated.

Best Regards

Mark Litchfield
www.ngssoftware.com