'Specially crafted username' opens the keys to the kingdom of FAIL:
Designated CVE-2015-8024, the bug covers "McAfee Enterprise Security Manager (ESM), Enterprise Security Manager/Log Manager (ESMLM), and Enterprise Security Manager/Receiver (ESMREC) 9.3.x before 9.3.2MR19, 9.4.x before 9.4.2MR9, and 9.5.x before 9.5.0MR8, when configured to use Active Directory or LDAP authentication sources, allow remote attackers to bypass authentication by logging in with the username 'NGCP|NGCP|NGCP;' and any password", the advisory states.
So, you install a security product and that provides an open backdoor into your systems?
(Score: 2) by FatPhil on Wednesday December 09 2015, @09:40AM
Great minds discuss ideas; average minds discuss events; small minds discuss people; the smallest discuss themselves
(Score: 2) by aristarchus on Thursday December 10 2015, @06:33AM
On the other hand, I find it is always a good idea to give precedence to native place names, and their native pronunciations. Oft I have heard that I am from "Saymous", or worse. Kansas and Arkansas are, of course, the names of the peoples who populated these places, before an unfortunate influx of illegal migrants.
(Score: 2) by FatPhil on Thursday December 10 2015, @08:14AM
Great minds discuss ideas; average minds discuss events; small minds discuss people; the smallest discuss themselves