On 23rd June, Comodo provided VeriSign with a second disclosure document on the previously reported vulnerability. VeriSign's response was to make further corrections with respect to the security issues reported to them by Comodo.
"We are pleased to see that some of the security flaws have now been addressed by VeriSign," said Comodo CEO, Melih Abdulhayoglu. "In our initial request we asked that VeriSign take immediate steps to correct and remediate the vulnerability and notify all affected users who may be affected by this security vulnerability and I truly hope that those steps have been taken."
VeriSign has publicly acknowledged fixes to their certificate management portal, including removing some of the features that were publicly assessable and ensuring that the portal is no longer found through methods of search and in Google, and requests for revoking of certificates are no longer available publicly.
Comodo believes there are still issues that need to be addressed, but VeriSign's response to the topic in question has been encouraging so far.
Comodo is a leading brand in Internet security. With US Headquarters in New Jersey and global resources in UK, China, India, Ukraine, and Romania, Comodo provides businesses and consumers worldwide with security and trust services, including digital certificates, PCI scanning, desktop security, and remote PC support. Securing online transactions for over 200,000 businesses, and with more than 25 million desktop security software installations, including an award-winning firewall and antivirus software, Comodo is Creating Trust Online'. For more information, visit Comodo's website.
Thanks & Regards,
COMODO Media Relations Email: [email protected] Office Tel US: +1 (201) 963 0004 x 4073 Office Tel Europe: +44 (0) 161 8747070 Office Tel India: +91 44 42022829 Fax Europe: +44 (0) 161 8771767 Fax US: 866-334-1641