Mozilla Products NSS RSA Signature Security Bypass (BERserk)

The Intel Security Advanced Threat Research Team has discovered a critical signature forgery vulnerability in the Mozilla Network Security Services (NSS) crypto library.

A vulnerability in some versions of Mozilla NSS could lead to a security bypass. The flaw is a variant of the RSA signature verification vulnerability discovered in 2006. It is caused by an error in the checking of the signature padding, allowing an attacker to forge a signature without the need to know the private RSA keys. Successful exploitation could allow an attacker to bypass SSL authentication in any domain, and intercept and monitor secure traffic.

Mozilla have released an update to resolve this issue and public details have been disclosed.

Mozilla Foundation Security Advisory 2014-73
McAfee Threat Advisory MTIS14-147

Microsoft Release AzureAD Basic

Microsoft have recently released their Mid-Tier AzureAD offering, in addition to AzureAD Free and AzureAD Premium.

This new offering is geared towards Enterprises who want to equip their 'deskless' employees with an Active Directory integrated Sign On experience without the Multifactor Authentication and similar features not required for these types of users.

McAfee Product Specialist - ePO

After much procrastination I finally took the Certified McAfee product specialist - ePO exam and passed!

McAfee Threat Intelligence Exchange RC available to download

McAfee have annouced that the 'Release Candidate for their new Threat Intelligence Exchange Architecture and Endpoint enabled products is now available to download frrom the TIE Beta Community.

Netgear FSM726 Emergency Password Reset Procedure

Ever bought a switch second hand, only to find out that the previous owner hasn't factory reset it before shipping it to you, YUP!

I have 2 Netgear FSM726V1 managed switches that I could do anything with because I didn't have the Terminal User password or the Enable password, and after about two weeks of digging around the internet I managed to find the following set of instructions which worked for me and I now have two switches I can configure.

You need to interrupt the boot sequence and use a hidden system command to disable the password for the switch on reboot.

1. Power on switch, press "ESC" key very quickly to go to Mini Boot Monitor mode. (If you press too late you will go into the option to boot from Flash or Net via TFTP.) 
2. Press "Enter" key. 
3. At the commend prompt Type: . EmergencyPasswordReset (Exactly as written it is case sensitive and doesn't like spaces. This is a hidden command.) 
4. There is then a question . "Are you sure? (y/n)". The answer is "X". This is a capital X - It will disable the switch password for the default admin user. 
5. You will get a response that the system password has been disabled - if you don't get this confirmation it hasn't worked because you have mistyped something but it won't tell you that.) 
6. Enter "g" to reboot.

ePolicy Orchestrator 5.1.0 Revised Documentation Now Available

Revised versions of the McAfee ePolicy Orchestrator 5.1.0 Product Guide and the McAfee ePolicy Orchestrator 5.1.0 Installation Guide are now available.

The revised documents include information about these commonly-accessed Knowledge Centre topics:

• Required SQL permissions
• Changing SQL credentials for connecting McAfee ePO to the database
• Supported user name and password formats
• Ports needed for communication through a firewall
• Changing the Agent-Server Communication Port
• Changing the Console-Application Server Communication Port
• Changing the Client-Server Authenticated Communication Port

PD24807 - ePolicy Orchestrator 5.1.0 Installation Guide
PD24808 - ePolicy Orchestrator 5.1.0 Product Guide

This information was provided by the McAfee Support Notification Service (SNS). The sign up for SNS alerts visit here.

Upgrading to ePO 5.1.1 - Where is the Patch file?

After receiving the much awaited SNS Notice announcing that (ePO) 5.1.1 is now available...... where do I get it from.

I looks like we have been struck by the usual issues from McAfee with different product teams uploading the patches to different places.

After visiting the 'Product and Solutions' page, entering my Grant number, visiting the ePO 5.1 Management Solutions page and browsing the 'Patches' tab.... its not there. So where have McAfee put the ZIP file?

After some digging, and vaguely remember I have had this issue in the past, lets try logging into my Support Portal (which you have to sign up for independently of receiving your grant letter). Lets go to Patches and Downloads, same place as logging in with my Grant number right? Nope Wrong!

This takes you to the 'Full Products Downloads and Updates'. Under the Patches Section, filter the list to ePolicy Orchestrator, and Ta Dah, the ePO 5.1.1 patch can be downloaded.