Access member only content, take part in discussions with comments on blogs, news and reviews and receive all the latest security industry news directly to your inbox. Join now for free.
Processing registration... Please wait.
This process can take up to a minute to complete.
A confirmation email has been sent to your email address - SUPPLIED EMAIL HERE. Please click on the link in the email to verify your email address. You need to verify your email before you can start posting.
If you do not receive your confirmation email within the next few minutes, it may be because the email has been captured by a junk mail filter. Please ensure you add the domain @scmagazine.com.au to your white-listed senders.
Security vendor Cyberoam has issued a hotfix for a interception vulnerability it downplayed this week.
The fix replaces generic certificates within Cyberoam Unified Threat Management (UTM) devices with unique ones.This squashes the possibility that the Deep Packet Inspection (DPI) modules could intercept traffic from users assigned to different Cyberoam UTM boxes.
Tor security researcher Runa Sandvik and OpenDNS’ Ben Laurie discovered the that units used shared certificates which users must accept to have their encrypted traffic scanned, ostensibly for security threats.
Users accepting the certificates could be scanned by any Cyberoam DPI unit, researchers said.
Cyberoam refuted the allegations along with suggestions by the researchers that private keys could be extracted from the devices.
"Cyberoam UTM either accepts or rejects, but does not store HTTPS Deep Scan Inspection data, as processing is done in real-time. The possibility of data interception between any two Cyberoam appliances is hence nullified," the company said on its blog.
“.. theoretically it is possible to decrypt SSL data using a conned private key. Cyberoam UTM does not allow import or export of the foresaid private key used for the SSL-Bridging technology.”
The fix generates a positive alert when it has been successfully applied.
Copyright © SC Magazine, Australia
To begin commenting right away, you can log in below or register an account if you don't yet have one. Please read our guidelines on commenting. Offending posts will be removed and your access may be suspended. Abusive or obscene language will not be tolerated. The comments below do not necessarily reflect the views or opinions of SC Magazine, Haymarket Media or its employees.