ftp://ftp.greatcircle.com/pub/firewalls/info/vendor_security_contacts/
This site provides access to a document entitled 'Vendor Security Contacts; Reporting Vulnerabilities and Obtaining New Patches version 1.3.' This paper provides a complete vendor list to report security vulnerabilities and to obtain security-related patches. The following vendors are listed - A/UX, Cray, Dec, HP, IBM, NeXT, SCO, SGI and Sun. Mailing addresses, Internet addresses, telephone numbers and email addresses are provided. Detailed information that must be provided in any report of a security vulnerability is also outlined.