[vpn-devel] Reporting vulnerabilities

[Petar Tsankov]

Hi,

I am a researcher at the Institute of Information security at ETH Zurich
(http://www.infsec.ethz.ch/). I am currently working on fuzz testing of
security protocol implementations.

As part of my work, we found two vulnerabilities in the latest version
of the ShrewSoft VPN Client for Windows. We would like to disclose the
vulnerabilities and work with you to fix the problems. Is there a
private email where we can disclose the details, because I noticed that
this mailing list is public and it would not be appropriate to give the
details here.

Thanks,

Petar