Saturday September 6, 2008 11:30 AM AEST
Latest Comments
"I urge every business person and IT person, management or staff, to get hold of a copy of "I.T. ..."
by John Franks | Sep 6, 2008 1:20 AM
 
"iam intrested in porn movies workes in actors from 36/m india pleas help me thanks."
by vinod agarwal | Sep 5, 2008 8:26 PM
 
"test for intresting"
by cocoboy | Sep 5, 2008 5:39 PM
 
"It's great that Google have recognised that security needs to be an important consideration with ..."
by Lloyd Borrett | Sep 5, 2008 11:53 AM
 
""Google arrived on the browser scene with the launch of Chrome"... Seems a bit misplaced to ..."
by Jeme | Sep 5, 2008 12:33 AM

Debian, Ununtu flawed for two years

  • Email a Friend
  • Print Page
By Stewart Meagher
May 21, 2008 11:36 AM
Tags: Debian, | Ununtu | flawed | for | two | years

Frederick Lee, a researcher at insecurity company Fortify, said that the flaw, which affects Ubuntu as well as Debian, had been "seriously underestimated " as it makes the Secure Sockets Layer (SSL) of the two Linux sustems vulnerable to malicious attack.

"We're calling this vulnerability 'insecure randomness' since it allows an attacker to predict the SSL cryptographic keys used for supposedly secure online transactions," he said.

Lee reckons that the flaw, which tinkers with the randomness engine used to encrypt secure transactions, could be used to intercept traffic between a user and supposedly secure connection between a user and, for example, an online banking site.

theinquirer.net (c) 2008 Incisive Media

 
Ads by Google
Thoughts on this article? Add a comment below.
Be the first to comment on this article.

Name:
*
 
Email:
(will not be displayed)
*
 
Comment:
(HTML not permitted)
*
 
Validation
*

Enter the code you see below:

 

 
 
 
 
 
 
Patch Management Whitepapers