CoSoSys Endpoint Protector predictable password generation Vulnerability

Release date:
Updated on:

Affected Systems:
CoSoSys Endpoint Protector
Description:
--------------------------------------------------------------------------------
Bugtraq id: 55570
Cve id: CVE-2012-2994

CoSoSys Endpoint Protector is a data loss protection software.

The CoSoSys Endpoint Protector 4 device creates an EPProot password Based on the device serial number, allowing remote attackers to gain access permissions through brute-force attacks.

<* Source: Christopher Campbell

Link: http://secunia.com/advisories/50604/
Http://www.kb.cert.org/vuls/id/591667
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

CoSoSys
-------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Www.endpointprotector.com/