Dropbox Insecure by Design

Thread Rating:

0 Votes - 0 Average
1
2
3
4
5

Threaded Mode | Linear Mode

Dropbox Insecure by Design

04-08-2011, 06:14 PM

Post: #1

RSS+FEEDER Offline

Advanced

Posts: 581
Joined: Apr 2010

Dropbox Insecure by Design

References

Sources:

http://dereknewton.com/2011/04/dropbox-a...-host-ids/

Security Engineer Derek Newton recently discovered a vulnerability in Dropbox's authentication mechanism, whilst looking for forensic traces left behind by such software. Derek discovered that in one of Dropbox's SQLite Database files, config.db, there are 3 fields contained:

Posted on Fri, 08 Apr 2011 04:54:27 +0000 at http://greyhat-security.com/dropbox-insecure-design

« Next Oldest | Next Newest »

Possibly Related Threads...
Thread:		Author	Replies:	Views:	Last Post
	SAP Crystal Reports 2008 ActiveX Insecure Methods Vulnerability	RSS+FEEDER	0	103	03-08-2011 11:56 AM Last Post: RSS+FEEDER
	Oracle Document Capture empop3.dll Insecure Method Vulnerability	RSS+FEEDER	0	116	03-06-2011 11:22 AM Last Post: RSS+FEEDER
	Oracle Document Capture Actbar2.ocx Insecure Method vulnerability	RSS+FEEDER	0	176	03-06-2011 11:22 AM Last Post: RSS+FEEDER
	Oracle Document Capture ActiveX Insecure method and Buffer Overflow Vulnerabilities	RSS+FEEDER	0	116	03-04-2011 08:44 AM Last Post: RSS+FEEDER
	IBM Proventia Mail Security System Insecure Direct Object Reference Vulnerability	RSS+FEEDER	0	191	10-29-2010 03:58 AM Last Post: RSS+FEEDER

Forum Jump:

User(s) browsing this thread: