Researcher discloses zero-day vulnerability in FireEye(csoonline.com)

29 pointsby wglb11 anni fa5 comments

http://www.csoonline.com/article/2980937/vulnerabilities/researcher-discloses-zero-day-vulnerability-in-fireeye.html

3 comments

Here's the exploit posting that they refer to in the first paragraph: https://www.exploit-db.com/exploits/38090/

    ...&name=../../../../../../../../../../../etc/passwd...

There's nothing like the old classics...

tptacek11 anni fa

One reason these vulnerabilities are so common is that the admin interfaces of appliances like FireEye's aren't normally exposed on the Internet.

[deleted]11 anni fa

wglb11 anni fa

Ah, but there is no perimeter!

qCOVET11 anni fa

A cyber security company that does this

"the box has Apache, pushing PHP, running as root."

is not a cyber security company .. lol