Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
InstallShield Update Agent - Downloads and executes "Rule Scripts" insecurely. Sep 16 2008 04:09PM
Brian Dowling (bjd simplicity net)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

SUMMARY

InstallShield Update Agent - Remote "Rule Script" Code Execution Vulnerability.

OVERVIEW

InstallShield Update Agent uses insecure methods of retrieving operational
script code from unauthenticated, unverified external sources over HTTP.
Arbit...

[ more ]  




 

Privacy Statement
Copyright 2009, SecurityFocus