Friday, February 09, 2007

Adobe Connect Security Breach

It's important to know that web collaboration solutions are not created equal. Example, no other company, except WebEx, has 3rd party security certifications like WebTrust and SAS-70 Type I & II. With that in mind, buyers need to be aware of the risks of using un-secure technologies that have not passed stringent requirements from 3rd party security certification firms.

Case in point: Adobe Connect, formerly Macromedia Breeze and previous to that, Presidia.

Adobe put out a security bulletin back in October 2006. If you did not get the bulletin as a user, here is the link you can click on: http://www.adobe.com/support/security/bulletins/apsb06-16.html (Just follow the 10 Steps, hope that your private information was not disclosed on accident and hope that the directions make sense.)

Secunia provides real-time data on the latest security and vulnerability issues. Secunia viewed this Adobe Connect problem as "moderately critical" because of the exposure of sensitive and private information.

"A vulnerability has been reported in Macromedia Breeze, which can be exploited by malicious people to disclose sensitive information.

The vulnerability is caused due to an unspecified error when parsing URLs and can be exploited to disclose the contents of arbitrary files on the system.

The vulnerability has been reported in all versions of 5.0 and 5.1."

Again, web collaboration solutions are not created equal. Buying the best technology minimizes your risk and will save you embarrassment at your job.

More on Adobe Connect:
Another Adobe Security Flaw
Adobe Connect Security Problems
Adobe Connect History
Same Song and Dance

Thanks,
David Chao
The Web Conferencing Expert