News
Contributed by: Lauren Gerber
Date: July 6, 2009
Today is officially the start of a new week, and yet another opportunity for me to bring your attention to some more computer vulnerabilities. The vulnerabilities which have received my attention today, have been reported in Sourcefire 3D Sensor as well as the Sourcefire Defense Center. The vulnerabilities which have been discovered run the risk of being exploited by malicious online attackers in order to actually bypass specific security restrictions. The Sourcefire IPS can use RNA information about a host to model traffic to a targeted operating system. This could refer to any operating system even Windows XP. some of the files of Windows XP may include but are not limited to the following:_inst16.exe, 8514a.dll, a3d.dll, b1cbase.sys as well as c_g18030.dll. You may be wondering, what is the cause of these vulnerabilities? Basically these vulnerabilities take place due to access restrictions which are not adequate and affective, when processing requests which are sent to the user/user.cgi script/admin. The fundamental problem with regard to this vulnerability is that it may be exploited in order to gain direct administrative access which, as we can all imagine, could prove disastrous. Administrative access can be achieved by simply sending a specific manipulated POST request to the exact script which has been directly affected. It is vital for everyone to acknowledge the factor that scripts in general, are affected by similar errors. You may be wondering which versions these vulnerabilities have been reported in? These vulnerabilities have been reported in the Sourcefire 3D Sensor and Sourcefire Defense Center firmware versions, before version 4.8.2. So obviously, the solution to these specific vulnerabilities is for all users to update to the firmware version 4.8.2. as quickly as possible. It can thus be quoted in conclusion: "As a rule, software systems do not work well until they have been used, and have failed repeatedly, in real applications."- Dave Parnas |
|||||
Software Downloads
User Comments