com.getdropbox.Dropbox app for iOS authentication bypass vulnerability

com.getdropbox.Dropbox app for iOS is an online collaboration app for managing documents based on the iOS platform. A security vulnerability exists in com.getdropbox.Dropbox app for iOS based platforms that stems from the program failing to use the kSecAccessControlUserPresence protection...

CVE-2018-12271

An issue was discovered in the com.getdropbox.Dropbox app 100.2 for iOS. The LAContext class for Biometric TouchID validation allows authentication bypass by overriding the LAContext return Boolean value to be "true" because the kSecAccessControlUserPresence protection mechanism is not used. In...

CVE-2018-12271

An issue was discovered in the com.getdropbox.Dropbox app 100.2 for iOS. The LAContext class for Biometric TouchID validation allows authentication bypass by overriding the LAContext return Boolean value to be "true" because the kSecAccessControlUserPresence protection mechanism is not used. In...

CVE-2018-12271

An issue was discovered in the com.getdropbox.Dropbox app 100.2 for iOS. The LAContext class for Biometric TouchID validation allows authentication bypass by overriding the LAContext return Boolean value to be "true" because the kSecAccessControlUserPresence protection mechanism is not used. In...

CVE-2018-12271

Affected software: com.getdropbox.Dropbox app for iOS, version 100.2. Root cause: The LAContext Biometric (TouchID) validation can be bypassed by overriding the LAContext return value to true because kSecAccessControlUserPresence is not used. This enables authentication with an arbitrary fingerpr...

CVE-2018-12271

An issue was discovered in the com.getdropbox.Dropbox app 100.2 for iOS. The LAContext class for Biometric TouchID validation allows authentication bypass by overriding the LAContext return Boolean value to be "true" because the kSecAccessControlUserPresence protection mechanism is not used. In...

PT-2018-11092 · Dropbox · Dropbox

Name of the Vulnerable Software and Affected Versions: com.getdropbox.Dropbox app version 100.2 for iOS Description: An issue in the LAContext class for Biometric TouchID validation allows authentication bypass by overriding the LAContext return Boolean value to be "true" because the...

Dropbox Lepton Denial of Service Vulnerability (CNVD-2018-11449)

Dropbox Lepton is a set of tools for lossless compression of JPEG format files. A security vulnerability exists in the 'validateAndCompress' function of the validation.cc file in Dropbox Lepton version 1.2.1. A remote attacker can exploit this vulnerability to cause a denial of service segmentati...

Design/Logic Flaw

An issue was discovered in Dropbox Lepton 1.2.1. The validateAndCompress function in validation.cc allows remote attackers to cause a denial of service SIGFPE and application crash via a malformed file...

CVE-2018-12108

An issue was discovered in Dropbox Lepton 1.2.1. The validateAndCompress function in validation.cc allows remote attackers to cause a denial of service SIGFPE and application crash via a malformed file...

CVE-2018-12108

An issue was discovered in Dropbox Lepton 1.2.1. The validateAndCompress function in validation.cc allows remote attackers to cause a denial of service SIGFPE and application crash via a malformed file...

UBUNTU-CVE-2018-12108

An issue was discovered in Dropbox Lepton 1.2.1. The validateAndCompress function in validation.cc allows remote attackers to cause a denial of service SIGFPE and application crash via a malformed file...

CVE-2018-12108

An issue was discovered in Dropbox Lepton 1.2.1. The validateAndCompress function in validation.cc allows remote attackers to cause a denial of service SIGFPE and application crash via a malformed file...

CVE-2018-12108

Dropbox Lepton 1.2.1 vulnerability (CVE-2018-12108) exists in the validation.cc file’s validateAndCompress function. A malformed input file can trigger a denial of service, causing a SIGFPE and application crash. Exploitation is described as remote, but no exploit details are provided in the conn...

CVE-2018-12108

An issue was discovered in Dropbox Lepton 1.2.1. The validateAndCompress function in validation.cc allows remote attackers to cause a denial of service SIGFPE and application crash via a malformed file...

CVE-2018-12108: Improper Input Validation

An issue was discovered in Dropbox Lepton 1.2.1. The validateAndCompress function in validation.cc allows remote attackers to cause a denial of service SIGFPE and application crash via a malformed file...

Dropbox: Bypass Local Authentication (TouchID)

​​This report describes an attack to bypass TouchID in the Dropbox Mobile iOS application on jailbroken iOS devices. Dropbox doesn’t consider jailbroken devices in scope for our bounty program...

Russian Hacker Who Allegedly Hacked LinkedIn and Dropbox Extradited to US

A Russian man accused of hacking LinkedIn, Dropbox, and Formspring in 2012 and possibly compromising personal details of over 100 million users, has pleaded not guilty in a U.S. federal court after being extradited from the Czech Republic. Yevgeniy Aleksandrovich Nikulin, 30, of Moscow was arrest...

Sophisticated RedDrop Malware Targets Android Phones

A sophisticated strain of mobile malware targeting Android devices can extract sensitive data and audio recordings, run up premium SMS charges and then tries to extort money from victims. According to security firm Wandera the malware, dubbed RedDrop, is being distributed inside 53 Android...

Dropbox: Exposed Git Repo at http://fileserver.dropboxbusiness.com

The report revealed an exposed git repository on a vendor that Dropbox uses. This endpoint could allow an attacker to retrieve much of the source code and git history for this service which could potentially reveal sensitive information like application secrets. Thankfully, after performing an...