DaemonForums  

Go Back   DaemonForums > DaemonForums.org > News

News News regarding BSD and related.

Reply
 
Thread Tools Display Modes
  #1   (View Single Post)  
Old 5th April 2011
J65nko J65nko is offline
Administrator
 
Join Date: May 2008
Location: Budel - the Netherlands
Posts: 3,154
Thanked 182 Times in 149 Posts
Default RSA break-in: it was the Flash Player's fault

From http://www.h-online.com/security/new...t-1221057.html

Quote:
On its company blog, RSA has released details about the server break-in it reported about two weeks ago. According to Uri Rivner, head of the company's "Consumer Identity Protection" division, the intruders used a backdoor that they installed using infected emails. The emails reportedly contained an Excel spreadsheet with an embedded, specially crafted Flash file. When the spreadsheet was opened, Flash Player started the Flash applet to play the file.

A flaw that has since been fixed by Adobe enabled the attackers to inject code into the system and execute it there. F-Secure has described an attack scenario that involves the same exploit.
__________________
You don't need to be a genius to debug a pf.conf firewall ruleset, you just need the guts to run tcpdump
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Flash Player sandbox can be bypassed J65nko News 1 6th January 2011 11:38 PM
flash player ccc FreeBSD Ports and Packages 9 23rd October 2008 12:07 PM
Flash player threads Carpetsmoker FreeBSD General 0 22nd October 2008 12:45 PM
Creating a flash player jgroch Programming 0 21st August 2008 05:27 AM
flash player installing problems seadog109 FreeBSD General 38 10th May 2008 01:04 AM


All times are GMT. The time now is 04:57 PM.


Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content copyright © 2007-2010, the authors
Daemon image copyright ©1988, Marshall Kirk McKusick