Contact Us Today! (215) 853-2266

Bardissi Enterprises Blog

Bardissi Enterprises has been serving the Hatfield area since 2000, providing IT Support such as technical helpdesk support, computer support, and consulting to small and medium-sized businesses.

WatchGuard X Edge Vulnerability: User Authentication Bypass

Severity: High

17 November, 2008

Summary:

  • This vulnerability affects: Firebox X Edge 10.2.3 (and earlier versions)
  • How an attacker exploits it: By entering a specially crafted username into the authentication page, or by manually visiting a specific URL
  • Impact: A remote attacker can authenticate to your Edge without valid login credentials, in some cases gaining VPN access to your network
  • What to do: Install 10.2.4 immediately

Exposure:

In order for you to verify that your users really are who they claim to be, the Firebox X Edge supports various types of user authentication. With user authentication configured, you can create URL filtering or VPN policies that permit or deny data traffic based on who someone is, rather than based on the IP address they come from. You also utilize user authentication when setting up mobile VPN access to your network. The Edge provides a secure HTTPS web page that allows your users to authenticate to your Edge.

Continue reading
0 Comments

Bardissi Enterprises: Watchguard LiveSecurity: Firefox 3.0.8 Update Fixes Pwn2Own and Zero Day Flaws

Severity: Medium

March 30, 2009

Summary:
  • This vulnerability affects: Firefox 3.0.7 (and previous versions) for Windows, Linux, and Macintosh
  • How an attacker exploits it: Multiple vectors of attack, including enticing one of your users to visit a malicious web page
  • Impact: Various results; in the worst case, an attacker executes code on your user’s computer, gaining complete control of it
  • What to do: Upgrade to Firefox 3.0.8
Continue reading
0 Comments

Watchguard Live Security Maliciously Crafted Email Can Pwn Your Exchange Server

Maliciously Crafted Email Can Pwn Your Exchange Server

Severity: High

10 February, 2009

Summary:

This vulnerability affects: All current versions of Exchange Server

How an attacker exploits it: By sending a specially crafted email (no user interaction necessary)

Impact: An attacker can potentially gain control of your Exchange Server

What to do: Deploy the appropriate Exchange Server patch immediately

Continue reading
0 Comments

LiveSecurity | Urgent: Latest Firefox Update Fixes Eight Security Flaws

Latest Firefox Update Fixes Eight Security Flaws

Severity: Medium

4 February, 2008

Summary:

This vulnerability affects: Firefox 3.0.5 (and previous versions) for Windows, Linux, and Macintosh

How an attacker exploits it: Multiple vectors of attack, including enticing one of your users to visit a malicious web page

Impact: Various results; in the worst case, an attacker executes code on your user’s computer, gaining complete control of it

What to do: Upgrade to Firefox 3.0.6

Exposure:

Late yesterday, the Mozilla Foundation released Firefox 3.0.6, fixing approximately eight security vulnerabilities (based on CVE-IDs) in the popular web browser. We summarize three of the vulnerabilities below:

Continue reading
0 Comments

WatchGuard Live Security:Malicious PDFs Exploit Adobe Reader and Acrobat Holes

Severity: Medium

4 November, 2008

Summary:

§ This vulnerability affects: Adobe Reader and Acrobat 8.1.2 and earlier, on Windows, Mac, *nix computers

§ How an attacker exploits it: Multiple vectors of attack, including enticing your users into viewing a maliciously crafted PDF document

§ Impact: Various results; in the worst case, an attacker can execute code on your computer, potentially gaining control of it

§ What to do: Upgrade to Acrobat Reader 9 (or 8.1.3) or Acrobat 8.1.3

Continue reading
0 Comments

Mobile? Grab this Article!

QR-Code dieser Seite

Blog Archive

Recent Comments

Tip of the Week: Which Headphones are Right for Your Needs?
23 April 2018
I will recommend Plantronics Backbeat Pro 2 SE Noise cancelling Headset with it's Great features.
Gamification: Make Business Fun for Everyone
27 January 2017
The world is based on the games. There are many types of games as per the aussie essay writing servi...
Let's Talk Tablets
12 January 2017
The concept of tablet is far better than that of PC because you can bring them with you everywhere a...
Tip of the Week: Tweak Your Workday in These 4 Ways and See Major Results
12 January 2017
The only thing will I will say regarding this blog is that it is very helpful at least for me. As I ...
WatchGuard Releases Version 10.2.7 for WSM, Edge, Fireware, and Fireware Pro
23 December 2016
I really needed to know about the fireware but i was confused that where can i find information abou...