SecurityRatty: tag: ami-sec

SEARCH RESULTS

Showing 1-2 of 2 records

Is Your Amazon Machine Image Vulnerable to SSH Spoofing Attacks?

2008-07-14 16:26:40 by Craig Balding in Cloud Security

On the 23rd June, Amazon quietly rolled out a security fix for an issue originally discussed in the Amazon developer forums. Amazon documentation was revised to reflect the change as follows Amazon EC2 public AMI s ( Amazon Machine Image ) generate unique SSH ( Secure Shell ) host keys each time you launch an instance. This enables you to get...

Tags: ssh, limit ssh access, ssh host keys, host keys, ssh user keys, amazon, host ssh keys, amazon machine image, initial ssh connection

Recent Symantec and IBM vulnerabilities, giblets, banned APIs and the SDL

2008-01-04 23:37:00 by sdl in The Security Development Lifecycle

Hi, Michael here. Happy New Year Recently, Symantec issued a security advisory warning users of critical remote code-execution security vulnerabilities in various Symantec email security products. The bugs caught my eye for a number of reasons First and foremost, security bugs in security products are always of great interest and concern to me,...