Two zero-day products in FireEye security company

Investigators Tavis Ormandy and Natalie Silvanovich working on Google's Project Zero discovered a simple method that compromises of FireEye's products, which, paradoxically, have been developed for the networks.zero-day FireEye

According to Google researchers' findings, attackers can create malicious files or trick users into in malicious connections to exploit a security flaw in various FireEye security products.

Using these , attackers can execute malicious code on FireEye devices as highly privileged mip (Malware Input Processor) users, but can also gain administrative privileges if needed.

The FireEye devices are vulnerable to NX, FX, AX, and EX series network security equipment. The company has already released patches and has pledged to provide assistance even to end-of-service businesses.

All the devices listed above are highly specialized equipment that will do just one thing: control internet traffic and try to detect malware and other types of attacks.

This type of equipment is usually present in large corporate networks, and there is between corporate Intranet and incoming / outgoing Internet connections.

Devices monitor Internet traffic on specific ports/protocols such as HTTP, FTP, SMTP, and others. Every time it is detected , η συσκευή της FireEye παρακολουθήσει τα δεδομένα και σαρώνει για κακόβουλο λογισμικό ή άλλα γνωστά exploits.

Attackers reportedly exploit this behavior by sending malicious JAR files either as an email attachment or as files hosted on a malicious website.

The vulnerability is extremely dangerous for two main reasons. First, the device has access to all of one's sensitive data ς, και δεύτερο, η συσκευή διαθέτει επίσης μια δευτερεύουσα σύνδεση στο Internet, μέσω της οποία λαμβάνει αναβαθμίσεις του . This connection can be used by attackers as a backdoor to intercept information from compromised networks.

iGuRu.gr The Best Technology Site in Greecefgns

every publication, directly to your inbox

Join the 2.100 registrants.

Written by Dimitris

Dimitris hates on Mondays .....

Leave a reply

Your email address is not published. Required fields are mentioned with *

Your message will not be published if:
1. Contains insulting, defamatory, racist, offensive or inappropriate comments.
2. Causes harm to minors.
3. It interferes with the privacy and individual and social rights of other users.
4. Advertises products or services or websites.
5. Contains personal information (address, phone, etc.).