SANS Daily Network Security Podcast (Stormcast) for Wednesday, September 22nd, 2021

iOS 15 Private Relay; macOS Finder Vuln; vCenter Advisory; NetGear Circle Parental Control Vuln;

00:00

My Next Class

Intrusion Detection In-Depth	Online	Oct 11th - Oct 16th 2021
Intrusion Detection In-Depth	Online \| British Summer Time	Oct 11th - Oct 16th 2021

… more classes

Help us make this podcast better by participating in a simple two question survey

A First Look at Apple's iOS 15 "Private Relay" feature
https://isc.sans.edu/forums/diary/A+First+Look+at+Apples+iOS+15+Private+Relay+feature/27858/

macOS Finder Security Feature Bypass Leads to Possible RCE
https://ssd-disclosure.com/ssd-advisory-macos-finder-rce/

VMWare vCenter Advisory
https://blogs.vmware.com/vsphere/2021/09/vmsa-2021-0020-what-you-need-to-know.html

NetGear Circle Parental Control Vulnerablity
https://blog.grimm-co.com/2021/09/mama-always-told-me-not-to-trust.html

iTunes

MP3 Download

RSS Feed

Google

Stitcher

Podbean

Amazon Echo

YouTube

Spreaker

iOS App

Spotify

Discussion

The Shibboleth vulnerability is quite interesting. In their example, the SAML signature covers the entire and they've made modifications to it (the changes to the uid) that should cause the signature to fail validation. This vulnerability speaks to larger architectural issues with Shibboleth. Obviously the signature validation is happening on a DIFFERENT document (the inline DTD defs are resolved and replaced) than the attribute extraction code works on (the inline DTD variables are not replaced). This is a HUGE no no and leads to the confused deputy issues that caused the vulnerability. I would bet other SP SAML parsing code is making similar mistakes.

Posted by Anonymous on Tue Jan 16 2018, 16:54

Top of page

Intrusion Detection In-Depth	Online	Oct 11th - Oct 16th 2021
Intrusion Detection In-Depth	Online \| British Summer Time	Oct 11th - Oct 16th 2021