OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
[ISN] Breach in Key Security Discovered

From: mea culpa (jerichoDIMENSIONAL.COM)
Date: Wed Jan 12 2000 - 09:28:24 CST


Forwarded From: "Noonan, Michael D" <mdnintel.com>

Breach in Key Security Discovered
-Isaac Slepner

Cryptographic researchers have discovered a potential vulnerability in the
security of Web server infrastructure. Until now, it was believed that
security information called "private keys" could not be found in the
memory systems of a server and compromised. Recently, however, researchers
have discovered that it may be possible for any user with the ability to
execute software on a company's e- commerce server to access cryptographic
keys and retrieve sensitive information.

Read more at:
http://www.entmag.com/breaknews.asp?ID=1847

ISN is sponsored by Security-Focus.COM