OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 3rd quarter (Jul-Sep) 1998: Re: Security Hole in Axent ESM

Re: Security Hole in Axent ESM

Douglas G Conorich (conorichUS.IBM.COM)
Thu, 27 Aug 1998 16:25:41 -0400

Just for grins, I talked to AXENT today and asked about the file check using
CRC's to see what they would tell me.  They told me that ever since ESM release
4.5 (May 1998), the product has offered a choice of either CRC or MD5
(cryptographic signature).  Intruder Alert's file watch capability also allows
a choice of CRC or MD5.

Douglas G. Conorich                                       IBM
Senior Internet Security Analyst                   P.O. Box 595
Internet Emergency Response Service   Clearfield, UT 84015 U.S.A.