Re: [Full-disclosure] Barracuda backdoor
- From: Tõnu Samuel <tonu@xxxxxx>
- Date: Thu, 28 Apr 2011 21:07:50 +0300
Let's be careful though: just because your system stopped working
doesn't mean it has a backdoor. It could have been implemented as simply
a periodic "phone home for updates" which received some type of
"license expired" message. A remote kill switch, for sure, but not
necessarily the same as a back door.
For now I have reports from people who do not want to expose them but
claim that Barracuda people can freely log in into their systems but
never asked for password etc.
This time I have no proof etc. Just I get lot of different pieces of
feedback in private.
Tõnu
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
- References:
- [Full-disclosure] Barracuda backdoor
- From: Tõnu Samuel
- Re: [Full-disclosure] Barracuda backdoor
- From: Benji
- Re: [Full-disclosure] Barracuda backdoor
- From: Tõnu Samuel
- Re: [Full-disclosure] Barracuda backdoor
- From: Marsh Ray
- [Full-disclosure] Barracuda backdoor
- Prev by Date: Re: [Full-disclosure] Insect Pro - Advisory 2011 0428 - Zero Day - Heap Buffer Overflow in xMatters APClient
- Next by Date: Re: [Full-disclosure] Barracuda backdoor
- Previous by thread: Re: [Full-disclosure] Barracuda backdoor
- Next by thread: Re: [Full-disclosure] Barracuda backdoor
- Index(es):
Relevant Pages
|
