Full Disclosure: Jetro Cockpit Secure Browsing vulnerability - remote code execution on all enterprise workstations simultaneously

[Ronen Z <ronen () quaji com>]

A critical vulnerability was discovered in Jetro Cockpit Secure Browsing, a
popular enterprise secure browsing solution.

The vulnerability allows simultaneous remote code execution into all the
enterprise workstations using the product. The vulnerability is unique in
that it breaks the basic value proposition of the security product in which
it is found.

Full disclosure and details here:
http://blog.quaji.com/2014/02/remote-code-execution-on-all-enterprise.html

Ronen Zilberman

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/