Linux iSync vulnerable to ManInTheMiddle (MITM) attacks

[Corrine]

Article here: [bREAKING] Linux iSync vulnerable to MITM attacks | Cyberwarzone

 

With the vulnerability hackers can perform a man in the middle attack by spoofing the SSL servers via arbitrary valid certificates. More information about the vuln at the source.

 

If you use iSync, upgrade to the latest version.

The update can be installed with the “yum” update program. Use su -c ‘yum update isync’ at the command line. For more information, refer to “Managing Software with yum”, available at

http://docs.fedoraproject.org/yum/.

[Guest LilBambi]

I had to look it up. I don't use it so no worries here at least.

 

Good to get the word out!

[V.T. Eric Layton]

No Isync here either, but it's good to know. Thanks for posting, Corrine.