[7777] in bugtraq
Re: Security Hole in Axent ESM
daemon@ATHENA.MIT.EDU (Douglas G Conorich)
Thu Aug 27 17:26:59 1998
Date: Thu, 27 Aug 1998 16:25:41 -0400
Reply-To: Douglas G Conorich <conorich@US.IBM.COM>
From: Douglas G Conorich <conorich@US.IBM.COM>
To: BUGTRAQ@NETSPACE.ORG
Just for grins, I talked to AXENT today and asked about the file check using
CRC's to see what they would tell me. They told me that ever since ESM release
4.5 (May 1998), the product has offered a choice of either CRC or MD5
(cryptographic signature). Intruder Alert's file watch capability also allows
a choice of CRC or MD5.
Douglas G. Conorich IBM
Senior Internet Security Analyst P.O. Box 595
Internet Emergency Response Service Clearfield, UT 84015 U.S.A.
