Re: Security Hole in Axent ESM

[mudge () L0PHT COM (Dr. Mudge)]

> I talked with our Axent contact and he claimed that their file integrity
> validation could not be compromised by a hacker because Axent has
> security experts that designed ESM.

These are probably the same 'experts' that decided in 4.4 that XOR was a
strong cryptographic method of protecting the communications back to the
server from the remote clients. Apparently they changed this in 4.5 but
probably only after someone called their 'security experts' on it.

.mudge