InstallShield Update Services server spoofing
Published:		16.09.2008
Source:		BUGTRAQ
SecurityVulns ID:		9295
Type:		m-i-t-m
Level:		4/10
Description:		Server's identity is not checked during update rules download.

CVE:

CVE-2008-1093

Original document

Brian Dowling, InstallShield Update Agent - Downloads and executes "Rule Scripts" insecurely. (16.09.2008)

Discuss:

Read or add your comments to this news (0 comments)