Re: Security Hole in Axent ESM

[conorich () US IBM COM (Douglas G Conorich)]

Just for grins, I talked to AXENT today and asked about the file check using
CRC's to see what they would tell me.  They told me that ever since ESM release
4.5 (May 1998), the product has offered a choice of either CRC or MD5
(cryptographic signature).  Intruder Alert's file watch capability also allows
a choice of CRC or MD5.

Douglas G. Conorich                                       IBM
Senior Internet Security Analyst                   P.O. Box 595
Internet Emergency Response Service   Clearfield, UT 84015 U.S.A.