SoylentNews is people
SoylentNews
'Specially crafted username' opens the keys to the kingdom of FAIL:
Designated CVE-2015-8024, the bug covers "McAfee Enterprise Security Manager (ESM), Enterprise Security Manager/Log Manager (ESMLM), and Enterprise Security Manager/Receiver (ESMREC) 9.3.x before 9.3.2MR19, 9.4.x before 9.4.2MR9, and 9.5.x before 9.5.0MR8, when configured to use Active Directory or LDAP authentication sources, allow remote attackers to bypass authentication by logging in with the username 'NGCP|NGCP|NGCP;' and any password", the advisory states.
So, you install a security product and that provides an open backdoor into your systems?
This discussion has been archived.
No new comments can be posted.
McAfee Security Manager lets Anybody Bypass Managers' Security
|
Log In/Create an Account
| Top
| 27 comments
| Search Discussion
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
I don't want a pickle,
I just wanna ride on my motorsickle.
And I don't want to die,
I just want to ride on my motorcy.
Cle.
-- Arlo Guthrie
(Score: 0, Informative) by Anonymous Coward on Wednesday December 09 2015, @02:56AM
We let in your ancestors, didn't we? How much vetting was done in that case? Talk about crazy!
(Score: 2, Offtopic) by Runaway1956 on Wednesday December 09 2015, @03:31AM
WTF is "we", white boy? Let me reiterate - my ancestors came to this continent in several waves, some of them as early as 20,000 years ago, some as recently as 100 years ago. I'd like to know who you think "we" is.
Now, some of my ancestors allowed some of my other ancestors onto this continent. Some of my other ancestors resisted others of my ancestors coming here. The upshot is, some of my ancestors died as a result of others of my ancestors arrival here. For better or worse, that is water under the bridge - it's history. What I'm concerned about is the future. There is a new wave of invaders. I, for one, don't intend to become another statistic in the history of defeated people on this continent.
Islam does not have a history of playing nice with others. If you plan to have an overseer ensuring that you bow down and beat your head on the ground five times each day while facing Mecca, that's alright for you, I guess. I will not.
(Score: 0, Disagree) by Anonymous Coward on Wednesday December 09 2015, @03:52AM
It doesn't matter how *I* got my good seat. What matters is that we set up a PROCESS that doesn't let the riff-raff in!
It's hard to argue with a deep thinking philosopher.
(Score: 1, Troll) by aristarchus on Wednesday December 09 2015, @06:54AM
Seriously, who thinks Runaway actually knows with any accuracy who his ancestors are? I bet most of them are illegal ancestors. Like, you know, ancestors without documents, with only a deep and abiding desire to, well, you know, ancestorate. What better reason could there be for restricting Muslim immigration exclusively to Arkansaws? Or Arkansaw and Oklahoma? They already have the greatest numbers of, um, something. No, wait! Kansas! Leavenworth! Guantanamo! Racist bastards!
(Score: 2) by FatPhil on Wednesday December 09 2015, @09:40AM
Great minds discuss ideas; average minds discuss events; small minds discuss people; the smallest discuss themselves
(Score: 2) by aristarchus on Thursday December 10 2015, @06:33AM
On the other hand, I find it is always a good idea to give precedence to native place names, and their native pronunciations. Oft I have heard that I am from "Saymous", or worse. Kansas and Arkansas are, of course, the names of the peoples who populated these places, before an unfortunate influx of illegal migrants.
(Score: 2) by FatPhil on Thursday December 10 2015, @08:14AM
Great minds discuss ideas; average minds discuss events; small minds discuss people; the smallest discuss themselves