CVE-2008-7255

CVE-2008-7255 concerns aMSN (Alvaro’s Messenger) where login_screen.tcl can save a password after logout, enabling session hijacking on unattended workstations. The vulnerability is described with a CVSS v2 base score of 4.6 (AV:L/AC:L/Au:N/C:P/I:P/A:P) and is classified as a local issue with no ...

Losing the Echo Chamber in the Critical Infrastructure Security Debate

As an analyst, and now as a consultant, I raise issues of digital and physical security: let’s talk about them, in plain terms, and collectively move to do something. As a member of the security digerati, I think we should be helping people, and we have to either step up with a better way forward...

The biggest security vulnerability — people!

We recently conducted a project focused on confidential data security enterprisestrategygroup.com that will be published soon. However, here are some interesting advance results that support this venerable security dictum. ESG asked 308 North American and European security professionals from larg...

NXP Semiconductors MIFARE Classic Smartcard - Multiple Vulnerabilities

NXP Semiconductors MIFARE Classic Smartcard - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/31853/info MIFARE Classic is prone to multiple security weaknesses: 1. A security weakness may allow attackers to recover the internal state of the linear feedback shift register. 2. A...

NXP Semiconductors MIFARE Classic Smartcard - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/31853/info MIFARE Classic is prone to multiple security weaknesses: 1. A security weakness may allow attackers to recover the internal state of the linear feedback shift register. 2. A security weakness may allow attackers to recover the previous state of...

For the domestic Enterprise Security ten vulnerabilities-vulnerability warning-the black bar safety net

The growing dependence on Internet applications in the modern enterprise, evolving security threats and changing regulatory standards so that the maintenance of a trusted network environment becomes a major problem. In today's global economic environment, the company enterprise has never been...